CVE-2020-5363

Published Jun 10, 2020 CVSS 3.1 · 8.6 High EPSS < 1% KEV · Not listed
Description
Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-26545 Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
dell
Published
Updated
Sep 16, 2024, 8:53 PM
Reserved
Jan 3, 2020, 12:00 AM
Status
Modified
Published
Jun 10, 2020, 9:15 PM
Modified
Jun 17, 2026, 3:21 AM