PT-2020-18420 · Dell · Dell Latitude 7202 Rugged Tablet Bios

Published 2020-04-03 · Updated 2020-04-06 · CVE-2020-5348

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28

Description The issue concerns a use-after-free (UAF) vulnerability in the EFI BOOT SERVICES component of the system management mode. This could allow a local unauthenticated attacker to exploit the vulnerability by overwriting the EFI BOOT SERVICES structure, potentially leading to the execution of arbitrary code in system management mode.

Recommendations For Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28, update the BIOS to version A28 or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2020-5348

Affected Products

Dell Latitude 7202 Rugged Tablet Bios

References · 3

• https://osv.dev/vulnerability/CVE-2020-5348 · Vendor Advisory
• https://dell.com/support/article/SLN320792 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5348 · Security Note