CVE-2020-5363
- State
- Published
- Severity
- 8.6 High
- Published
- Jun 10, 2020
- Updated
- Sep 16, 2024
- Reserved
- Jan 3, 2020
Description
Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.6 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H | dell |
Weaknesses
- CWE-158 Improper Neutralization of Null Byte or NUL Character
Affected Products
| Product | Versions |
|---|---|
Dell Client Consumer and Commercial platformsDell |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.