What is CVE-2020-5362?

CVE-2020-5362 is a high-severity vulnerability in Dell Chengming 3967, classified under Improper Authorization. CVSS score: 7.1/10. Published 2020-06-10.

How severe is CVE-2020-5362?

High severity. CVSS v3 base score is 7.1 out of 10.

Auth bypass in Dell Chengming 3967

CVE-2020-5362

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.

EPSS: 0.003 (21.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H.

Affected products

Dell Chengming_3967
Dell Chengming_3967_firmware
Dell Chengming_3977
Dell Chengming_3977_firmware
Dell Chengming_3980
Dell Chengming_3980_firmware
Dell Chengming_3988
Dell Chengming_3988_firmware
Dell Chengming_3990
Dell Chengming_3990_firmware

Weakness classification (CWE)

CWE-285 — Improper Authorization
CWE-862 — Missing Authorization

References

security_alert@emc.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-5362?: CVE-2020-5362 is a high-severity vulnerability in Dell Chengming 3967, classified under Improper Authorization. CVSS score: 7.1/10. Published 2020-06-10.
How severe is CVE-2020-5362?: High severity. CVSS v3 base score is 7.1 out of 10.