high7.1
CVE-2020-5362
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized act…
Impact
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Chengming 3967 Firmware | before 1.9.0 |
| Dell | Chengming 3977 Firmware | before 1.9.0 |
| Dell | Chengming 3980 Firmware | before 2.16.0 |
| Dell | Chengming 3988 Firmware | before 1.3.0 |
| Dell | Chengming 3990 Firmware | before 1.1.3 |
| Dell | Chengming 3991 Firmware | before 1.1.3 |
| Dell | G3 15 3500 Firmware | before 1.2.1 |
| Dell | G3 15 3590 Firmware | before 1.11.0 |
| Dell | G3 3579 Firmware | before 1.13.0 |
| Dell | G3 3779 Firmware | before 1.13.0 |
| Dell | G5 15 5500 Firmware | before 1.2.1 |
| Dell | G5 15 5590 Firmware | before 1.13.2 |