PT-2020-18441 · Dell · Dell G7 17 7790 Bios

Published 2020-09-02 · Updated 2020-09-14 · CVE-2020-5378

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell G7 17 7790 BIOS versions prior to 1.13.2

Description The issue allows a local attacker with access to system memory to exploit a UEFI BIOS Boot Services overwrite vulnerability. This can be done by overwriting the EFI BOOT SERVICES structure, enabling the execution of arbitrary code in System Management Mode (SMM).

Recommendations For Dell G7 17 7790 BIOS versions prior to 1.13.2, update the BIOS to version 1.13.2 or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2020-5378

Affected Products

Dell G7 17 7790 Bios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-5378 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5378 · Vendor Advisory
• https://dell.com/support/article/SLN322616 · Vendor Advisory