PT-2020-18439 · Dell · Dell Inspiron 7347 Bios

F1Sh + 2 · Published 2020-09-02 · Updated 2020-09-14 · CVE-2020-5376

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell Inspiron 7347 BIOS versions prior to A13

Description The issue allows a local attacker with access to system memory to exploit a UEFI BIOS Boot Services overwrite vulnerability. This can be done by overwriting the EFI BOOT SERVICES structure, enabling the execution of arbitrary code in System Management Mode (SMM).

Recommendations For Dell Inspiron 7347 BIOS versions prior to A13, update the BIOS to version A13 or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2020-5376

Affected Products

Dell Inspiron 7347 Bios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-5376 · Security Note
• https://dell.com/support/article/SLN322616 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-5376 · Vendor Advisory