PT-2020-18427 · Dell · Dell Manageability

Published 2020-06-10 · Updated 2020-06-23 · CVE-2020-5362

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell Client Consumer and Commercial platforms (affected versions not specified)

Description The issue concerns an improper authorization vulnerability in the Dell Manageability interface. An unauthorized actor with local system access and OS administrator privileges could bypass BIOS Administrator authentication. This allows the actor to restore BIOS Setup configuration to default values.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Missing Authorization

Weakness Enumeration

CWE-285

CWE-862

Related Identifiers

CVE-2020-5362

Affected Products

Dell Manageability

References · 3

• https://osv.dev/vulnerability/CVE-2020-5362 · Vendor Advisory
• https://dell.com/support/article/SLN321726 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5362 · Security Note