PT-2020-18448 · Dell · Dell Inspiron 15 7579 2-In-1 Bios

Nicholas Armour · Published 2020-11-10 · Updated 2020-11-24 · CVE-2020-5388

Positive Technologies (AI Summary)

CVSS v3.1

6.9

Medium

Base vector

AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0

Description The issue is related to an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Recommendations For Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0, update the BIOS to version 1.31.0 or later to resolve the issue. As a temporary workaround, consider restricting access to SMI handlers to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2020-5388

Affected Products

Dell Inspiron 15 7579 2-In-1 Bios

References · 5

• https://osv.dev/vulnerability/CVE-2020-5388 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5388 · Security Note
• https://dell.com/support/article/en-us/sln322869/dsa-2020-215-dell-inspiron-15-7579-2-in-1-improper-smm-communication-buffer-boundary-verification-vulnerability · Vendor Advisory
• https://t.me/cvenotify/6128 · Telegram Post
• https://t.me/cibsecurity/16088 · Telegram Post