PT-2020-18402 · Dell+1 · Dell Client+1

Published 2020-02-21 · Updated 2020-03-03 · CVE-2020-5326

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell Client platforms (affected versions not specified)

Description A BIOS Setup configuration authentication bypass issue exists in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. This allows an attacker with physical access to the system to make unauthorized changes to the BIOS Setup configuration settings without needing the BIOS Admin password, by selecting the Optimized Defaults option in the pre-boot iRST Manager.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-5326

Affected Products

Dell Client

Intel Rapid Storage Technology

References · 3

• https://osv.dev/vulnerability/CVE-2020-5326 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5326 · Security Note
• https://dell.com/support/article/SLN320337 · Vendor Advisory