{"answers":{"affected":"It affects 354 products.","exploited":"There is no known exploitation of CVE-2020-5362 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2020-5362 yet. Limit exposure of the affected software until one is available.","what":"CVE-2020-5362 is a high-severity missing authorization vulnerability in Dell Chengming 3980 Firmware, published on 10 Jun 2020. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link."},"fix_prompt":"Check this codebase for CVE-2020-5362 and fix it if it is affected.\n\nWhat it is: CVE-2020-5362 is a high-severity missing authorization vulnerability in Dell Chengming 3980 Firmware, published on 10 Jun 2020. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.\nExploitation: There is no known exploitation of CVE-2020-5362 in the wild and no public exploit code.\n\nAffected product: Dell Chengming 3980 Firmware. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2020-5362/ (Markdown: https://insights.sbomify.com/CVE-2020-5362/index.md)","id":"CVE-2020-5362","markdown":"https://insights.sbomify.com/CVE-2020-5362/index.md","name":"CVE-2020-5362","record":{"aliases":["GHSA-xgch-xjh8-4m78"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["security_bypass"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Dell BIOS interface","requires_auth":"none","summary":"Local attackers with admin privileges can bypass BIOS authentication to reset configuration to defaults on Dell platforms.","user_interaction":"required","vuln_class":"missing_authorization"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"dell","cpe":[{"product":"chengming_3967_firmware","vendor":"dell"},{"product":"chengming_3977_firmware","vendor":"dell"},{"product":"chengming_3980_firmware","vendor":"dell"},{"product":"chengming_3988_firmware","vendor":"dell"},{"product":"chengming_3990_firmware","vendor":"dell"},{"product":"chengming_3991_firmware","vendor":"dell"},{"product":"embedded_box_pc_5000_firmware","vendor":"dell"},{"product":"g3_15_3500_firmware","vendor":"dell"},{"product":"g3_15_3590_firmware","vendor":"dell"},{"product":"g3_3579_firmware","vendor":"dell"},{"product":"g3_3779_firmware","vendor":"dell"},{"product":"g5_15_5500_firmware","vendor":"dell"},{"product":"g5_15_5590_firmware","vendor":"dell"},{"product":"g5_5090_firmware","vendor":"dell"},{"product":"g5_5587_firmware","vendor":"dell"},{"product":"g7_15_7590_firmware","vendor":"dell"},{"product":"g7_17_7790_firmware","vendor":"dell"},{"product":"g7_7588_firmware","vendor":"dell"},{"product":"inspiron_11_2-in-1_3153_firmware","vendor":"dell"},{"product":"inspiron_11_2-in-1_3158_firmware","vendor":"dell"},{"product":"inspiron_13_2-in-1_5368_firmware","vendor":"dell"},{"product":"inspiron_13_2-in-1_5378_firmware","vendor":"dell"},{"product":"inspiron_13_2-in-1_5379_firmware","vendor":"dell"},{"product":"inspiron_13_2-in-1_7353_firmware","vendor":"dell"},{"product":"inspiron_13_2-in-1_7359_firmware","vendor":"dell"},{"product":"inspiron_13_2-in-1_7368_firmware","vendor":"dell"},{"product":"inspiron_13_2-in-1_7373_firmware","vendor":"dell"},{"product":"inspiron_13_2-in-1_7378_firmware","vendor":"dell"},{"product":"inspiron_13_7370_firmware","vendor":"dell"},{"product":"inspiron_14_3458_firmware","vendor":"dell"},{"product":"inspiron_14_3459_firmware","vendor":"dell"},{"product":"inspiron_14_3467_firmware","vendor":"dell"},{"product":"inspiron_14_3468_firmware","vendor":"dell"},{"product":"inspiron_14_3473_firmware","vendor":"dell"},{"product":"inspiron_14_5468_firmware","vendor":"dell"},{"product":"inspiron_14_5490_firmware","vendor":"dell"},{"product":"inspiron_14_7460_firmware","vendor":"dell"},{"product":"inspiron_14_gaming_7466_firmware","vendor":"dell"},{"product":"inspiron_14_gaming_7467_firmware","vendor":"dell"},{"product":"inspiron_15-3552_firmware","vendor":"dell"},{"product":"inspiron_15_2-in-1_5568_firmware","vendor":"dell"},{"product":"inspiron_15_2-in-1_5578_firmware","vendor":"dell"},{"product":"inspiron_15_2-in-1_5579_firmware","vendor":"dell"},{"product":"inspiron_15_2-in-1_7568_firmware","vendor":"dell"},{"product":"inspiron_15_2-in-1_7569_firmware","vendor":"dell"},{"product":"inspiron_15_2-in-1_7573_firmware","vendor":"dell"},{"product":"inspiron_15_2-in-1_7579_firmware","vendor":"dell"},{"product":"inspiron_15_3559_firmware","vendor":"dell"},{"product":"inspiron_15_3567_firmware","vendor":"dell"},{"product":"inspiron_15_3568_firmware","vendor":"dell"},{"product":"inspiron_15_5566_firmware","vendor":"dell"},{"product":"inspiron_15_5567_firmware","vendor":"dell"},{"product":"inspiron_15_7560_firmware","vendor":"dell"},{"product":"inspiron_15_7570_firmware","vendor":"dell"},{"product":"inspiron_15_7572_firmware","vendor":"dell"},{"product":"inspiron_15_gaming_7566_firmware","vendor":"dell"},{"product":"inspiron_15_gaming_7567_firmware","vendor":"dell"},{"product":"inspiron_15_gaming_7577_firmware","vendor":"dell"},{"product":"inspiron_17_2-in-1_7773_firmware","vendor":"dell"},{"product":"inspiron_17_2-in-1_7778_firmware","vendor":"dell"},{"product":"inspiron_17_2-in-1_7779_firmware","vendor":"dell"},{"product":"inspiron_17_5767_firmware","vendor":"dell"},{"product":"inspiron_3268_firmware","vendor":"dell"},{"product":"inspiron_3470_firmware","vendor":"dell"},{"product":"inspiron_3471_firmware","vendor":"dell"},{"product":"inspiron_3476_firmware","vendor":"dell"},{"product":"inspiron_3480_firmware","vendor":"dell"},{"product":"inspiron_3481_firmware","vendor":"dell"},{"product":"inspiron_3490_firmware","vendor":"dell"},{"product":"inspiron_3493_firmware","vendor":"dell"},{"product":"inspiron_3576_firmware","vendor":"dell"},{"product":"inspiron_3580_firmware","vendor":"dell"},{"product":"inspiron_3581_firmware","vendor":"dell"},{"product":"inspiron_3583_firmware","vendor":"dell"},{"product":"inspiron_3584_firmware","vendor":"dell"},{"product":"inspiron_3590_firmware","vendor":"dell"},{"product":"inspiron_3593_firmware","vendor":"dell"},{"product":"inspiron_3668_firmware","vendor":"dell"},{"product":"inspiron_3670_firmware","vendor":"dell"},{"product":"inspiron_3671_firmware","vendor":"dell"},{"product":"inspiron_3780_firmware","vendor":"dell"},{"product":"inspiron_3781_firmware","vendor":"dell"},{"product":"inspiron_3790_firmware","vendor":"dell"},{"product":"inspiron_3793_firmware","vendor":"dell"},{"product":"inspiron_3880_firmware","vendor":"dell"},{"product":"inspiron_3881_firmware","vendor":"dell"},{"product":"inspiron_5300_firmware","vendor":"dell"},{"product":"inspiron_5370_firmware","vendor":"dell"},{"product":"inspiron_5390_firmware","vendor":"dell"},{"product":"inspiron_5391_firmware","vendor":"dell"},{"product":"inspiron_5400_2_in1_firmware","vendor":"dell"},{"product":"inspiron_5457_firmware","vendor":"dell"},{"product":"inspiron_5459_firmware","vendor":"dell"},{"product":"inspiron_5480_firmware","vendor":"dell"},{"product":"inspiron_5481_firmware","vendor":"dell"},{"product":"inspiron_5482_firmware","vendor":"dell"},{"product":"inspiron_5490_aio_firmware","vendor":"dell"},{"product":"inspiron_5491_2_in_1_firmware","vendor":"dell"},{"product":"inspiron_5493_firmware","vendor":"dell"},{"product":"inspiron_5494_firmware","vendor":"dell"},{"product":"inspiron_5498_firmware","vendor":"dell"},{"product":"inspiron_5557_firmware","vendor":"dell"},{"product":"inspiron_5559_firmware","vendor":"dell"},{"product":"inspiron_5570_firmware","vendor":"dell"},{"product":"inspiron_5580_firmware","vendor":"dell"},{"product":"inspiron_5582_firmware","vendor":"dell"},{"product":"inspiron_5583_firmware","vendor":"dell"},{"product":"inspiron_5584_firmware","vendor":"dell"},{"product":"inspiron_5590_firmware","vendor":"dell"},{"product":"inspiron_5591_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_5593_firmware","vendor":"dell"},{"product":"inspiron_5594_firmware","vendor":"dell"},{"product":"inspiron_5598_firmware","vendor":"dell"},{"product":"inspiron_5759_firmware","vendor":"dell"},{"product":"inspiron_5770_firmware","vendor":"dell"},{"product":"inspiron_7300_2_in_1_firmware","vendor":"dell"},{"product":"inspiron_7380_firmware","vendor":"dell"},{"product":"inspiron_7386_firmware","vendor":"dell"},{"product":"inspiron_7390_2_in_1_firmware","vendor":"dell"},{"product":"inspiron_7391_2_in_1_firmware","vendor":"dell"},{"product":"inspiron_7391_firmware","vendor":"dell"},{"product":"inspiron_7472_firmware","vendor":"dell"},{"product":"inspiron_7490_firmware","vendor":"dell"},{"product":"inspiron_7500_2_in_1_firmware","vendor":"dell"},{"product":"inspiron_7500_firmware","vendor":"dell"},{"product":"inspiron_7501_firmware","vendor":"dell"},{"product":"inspiron_7580_firmware","vendor":"dell"},{"product":"inspiron_7586_firmware","vendor":"dell"},{"product":"inspiron_7590_2_in_1_firmware","vendor":"dell"},{"product":"inspiron_7590_firmware","vendor":"dell"},{"product":"inspiron_7591_2_in_1_firmware","vendor":"dell"},{"product":"inspiron_7591_firmware","vendor":"dell"},{"product":"inspiron_7786_firmware","vendor":"dell"},{"product":"inspiron_7790_aio_firmware","vendor":"dell"},{"product":"insprion_5491_aio_firmware","vendor":"dell"},{"product":"latitude_3180_firmware","vendor":"dell"},{"product":"latitude_3189_firmware","vendor":"dell"},{"product":"latitude_3190_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3190_firmware","vendor":"dell"},{"product":"latitude_3300_firmware","vendor":"dell"},{"product":"latitude_3301_firmware","vendor":"dell"},{"product":"latitude_3310_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3310_firmware","vendor":"dell"},{"product":"latitude_3350_firmware","vendor":"dell"},{"product":"latitude_3379_firmware","vendor":"dell"},{"product":"latitude_3380_firmware","vendor":"dell"},{"product":"latitude_3390_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3400_firmware","vendor":"dell"},{"product":"latitude_3410_firmware","vendor":"dell"},{"product":"latitude_3460_firmware","vendor":"dell"},{"product":"latitude_3460_mobile_thin_client_firmware","vendor":"dell"},{"product":"latitude_3470_firmware","vendor":"dell"},{"product":"latitude_3480_firmware","vendor":"dell"},{"product":"latitude_3480_mobile_thin_client_firmware","vendor":"dell"},{"product":"latitude_3490_firmware","vendor":"dell"},{"product":"latitude_3500_firmware","vendor":"dell"},{"product":"latitude_3510_firmware","vendor":"dell"},{"product":"latitude_3560_firmware","vendor":"dell"},{"product":"latitude_3570_firmware","vendor":"dell"},{"product":"latitude_3580_firmware","vendor":"dell"},{"product":"latitude_3590_firmware","vendor":"dell"},{"product":"latitude_5175_firmware","vendor":"dell"},{"product":"latitude_5179_firmware","vendor":"dell"},{"product":"latitude_5250_firmware","vendor":"dell"},{"product":"latitude_5280_firmware","vendor":"dell"},{"product":"latitude_5280_mobile_thin_client_firmware","vendor":"dell"},{"product":"latitude_5285_firmware","vendor":"dell"},{"product":"latitude_5288_firmware","vendor":"dell"},{"product":"latitude_5289_firmware","vendor":"dell"},{"product":"latitude_5290_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5290_firmware","vendor":"dell"},{"product":"latitude_5300_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5310_2_in_1_firmware","vendor":"dell"},{"product":"latitude_5310_firmware","vendor":"dell"},{"product":"latitude_5410_firmware","vendor":"dell"},{"product":"latitude_5411_firmware","vendor":"dell"},{"product":"latitude_5414_rugged_firmware","vendor":"dell"},{"product":"latitude_5420_rugged_firmware","vendor":"dell"},{"product":"latitude_5424_rugged_firmware","vendor":"dell"},{"product":"latitude_5450_firmware","vendor":"dell"},{"product":"latitude_5480_firmware","vendor":"dell"},{"product":"latitude_5488_firmware","vendor":"dell"},{"product":"latitude_5490_firmware","vendor":"dell"},{"product":"latitude_5491_firmware","vendor":"dell"},{"product":"latitude_5510_firmware","vendor":"dell"},{"product":"latitude_5511_firmware","vendor":"dell"},{"product":"latitude_5550_firmware","vendor":"dell"},{"product":"latitude_5580_firmware","vendor":"dell"},{"product":"latitude_5590_firmware","vendor":"dell"},{"product":"latitude_5591_firmware","vendor":"dell"},{"product":"latitude_7210_2_in_1_firmware","vendor":"dell"},{"product":"latitude_7212_rugged_extreme_tablet_firmware","vendor":"dell"},{"product":"latitude_7214_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7250_firmware","vendor":"dell"},{"product":"latitude_7275_firmware","vendor":"dell"},{"product":"latitude_7280_firmware","vendor":"dell"},{"product":"latitude_7285_firmware","vendor":"dell"},{"product":"latitude_7290_firmware","vendor":"dell"},{"product":"latitude_7310_firmware","vendor":"dell"},{"product":"latitude_7350_firmware","vendor":"dell"},{"product":"latitude_7370_firmware","vendor":"dell"},{"product":"latitude_7380_firmware","vendor":"dell"},{"product":"latitude_7389_firmware","vendor":"dell"},{"product":"latitude_7390_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7390_firmware","vendor":"dell"},{"product":"latitude_7410_firmware","vendor":"dell"},{"product":"latitude_7414_rugged_firmware","vendor":"dell"},{"product":"latitude_7424_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7480_firmware","vendor":"dell"},{"product":"latitude_7490_firmware","vendor":"dell"},{"product":"latitude_9410_firmware","vendor":"dell"},{"product":"latitude_9510_firmware","vendor":"dell"},{"product":"latitude_e5250_firmware","vendor":"dell"},{"product":"latitude_e5270_firmware","vendor":"dell"},{"product":"latitude_e5450_firmware","vendor":"dell"},{"product":"latitude_e5470_firmware","vendor":"dell"},{"product":"latitude_e5550_firmware","vendor":"dell"},{"product":"latitude_e5570_firmware","vendor":"dell"},{"product":"latitude_e7250_firmware","vendor":"dell"},{"product":"latitude_e7270_firmware","vendor":"dell"},{"product":"latitude_e7270_mobile_thin_client_firmware","vendor":"dell"},{"product":"latitude_e7450_firmware","vendor":"dell"},{"product":"latitude_e7470_firmware","vendor":"dell"},{"product":"optiplex_3040_firmware","vendor":"dell"},{"product":"optiplex_3046_firmware","vendor":"dell"},{"product":"optiplex_3050_aio_firmware","vendor":"dell"},{"product":"optiplex_3050_firmware","vendor":"dell"},{"product":"optiplex_3060_firmware","vendor":"dell"},{"product":"optiplex_3070_firmware","vendor":"dell"},{"product":"optiplex_3240_aio_firmware","vendor":"dell"},{"product":"optiplex_3280_aio_firmware","vendor":"dell"},{"product":"optiplex_5040_firmware","vendor":"dell"},{"product":"optiplex_5050_firmware","vendor":"dell"},{"product":"optiplex_5060_firmware","vendor":"dell"},{"product":"optiplex_5070_firmware","vendor":"dell"},{"product":"optiplex_5080_firmware","vendor":"dell"},{"product":"optiplex_5250_firmware","vendor":"dell"},{"product":"optiplex_5260_aio_firmware","vendor":"dell"},{"product":"optiplex_5270_aio_firmware","vendor":"dell"},{"product":"optiplex_5480_aio_firmware","vendor":"dell"},{"product":"optiplex_7040_firmware","vendor":"dell"},{"product":"optiplex_7050_firmware","vendor":"dell"},{"product":"optiplex_7060_firmware","vendor":"dell"},{"product":"optiplex_7070_firmware","vendor":"dell"},{"product":"optiplex_7071_tower_firmware","vendor":"dell"},{"product":"optiplex_7080_firmware","vendor":"dell"},{"product":"optiplex_7440_aio_firmware","vendor":"dell"},{"product":"optiplex_7450_firmware","vendor":"dell"},{"product":"optiplex_7460_aio_firmware","vendor":"dell"},{"product":"optiplex_7480_aio_firmware","vendor":"dell"},{"product":"optiplex_7760_aio_firmware","vendor":"dell"},{"product":"optiplex_7780_aio_firmware","vendor":"dell"},{"product":"optiplex_aio_7470_firmware","vendor":"dell"},{"product":"optiplex_aio_7770_firmware","vendor":"dell"},{"product":"optiplex_xe3_firmware","vendor":"dell"},{"product":"precision_3420_tower_firmware","vendor":"dell"},{"product":"precision_3430_firmware","vendor":"dell"},{"product":"precision_3440_firmware","vendor":"dell"},{"product":"precision_3510_firmware","vendor":"dell"},{"product":"precision_3520_firmware","vendor":"dell"},{"product":"precision_3530_firmware","vendor":"dell"},{"product":"precision_3541_firmware","vendor":"dell"},{"product":"precision_3550_firmware","vendor":"dell"},{"product":"precision_3551_firmware","vendor":"dell"},{"product":"precision_3620_tower_firmware","vendor":"dell"},{"product":"precision_3630_tower_firmware","vendor":"dell"},{"product":"precision_3640_tower_firmware","vendor":"dell"},{"product":"precision_3930_rack_firmware","vendor":"dell"},{"product":"precision_5510_firmware","vendor":"dell"},{"product":"precision_5520_firmware","vendor":"dell"},{"product":"precision_5530_2-in_1_firmware","vendor":"dell"},{"product":"precision_5530_firmware","vendor":"dell"},{"product":"precision_5540_firmware","vendor":"dell"},{"product":"precision_5550_firmware","vendor":"dell"},{"product":"precision_5720_aio_firmware","vendor":"dell"},{"product":"precision_5820_tower_firmware","vendor":"dell"},{"product":"precision_7510_firmware","vendor":"dell"},{"product":"precision_7520_firmware","vendor":"dell"},{"product":"precision_7530_firmware","vendor":"dell"},{"product":"precision_7710_firmware","vendor":"dell"},{"product":"precision_7720_firmware","vendor":"dell"},{"product":"precision_7730_firmware","vendor":"dell"},{"product":"precision_7820_firmware","vendor":"dell"},{"product":"precision_7820_tower_firmware","vendor":"dell"},{"product":"precision_7920_firmware","vendor":"dell"},{"product":"precision_7920_tower_firmware","vendor":"dell"},{"product":"precision_tower_3431_small_form_factor_firmware","vendor":"dell"},{"product":"vostro_14_3468_firmware","vendor":"dell"},{"product":"vostro_14_3478_firmware","vendor":"dell"},{"product":"vostro_14_5468_firmware","vendor":"dell"},{"product":"vostro_15_3568_firmware","vendor":"dell"},{"product":"vostro_15_3578_firmware","vendor":"dell"},{"product":"vostro_15_5568_firmware","vendor":"dell"},{"product":"vostro_15_7570_firmware","vendor":"dell"},{"product":"vostro_15_7580_firmware","vendor":"dell"},{"product":"vostro_3070_firmware","vendor":"dell"},{"product":"vostro_3267_firmware","vendor":"dell"},{"product":"vostro_3268_firmware","vendor":"dell"},{"product":"vostro_3458_firmware","vendor":"dell"},{"product":"vostro_3459_firmware","vendor":"dell"},{"product":"vostro_3470_firmware","vendor":"dell"},{"product":"vostro_3471_firmware","vendor":"dell"},{"product":"vostro_3480_firmware","vendor":"dell"},{"product":"vostro_3481_firmware","vendor":"dell"},{"product":"vostro_3490_firmware","vendor":"dell"},{"product":"vostro_3491_firmware","vendor":"dell"},{"product":"vostro_3558_firmware","vendor":"dell"},{"product":"vostro_3559_firmware","vendor":"dell"},{"product":"vostro_3580_firmware","vendor":"dell"},{"product":"vostro_3581_firmware","vendor":"dell"},{"product":"vostro_3583_firmware","vendor":"dell"},{"product":"vostro_3584_firmware","vendor":"dell"},{"product":"vostro_3590_firmware","vendor":"dell"},{"product":"vostro_3591_firmware","vendor":"dell"},{"product":"vostro_3660_firmware","vendor":"dell"},{"product":"vostro_3667_firmware","vendor":"dell"},{"product":"vostro_3668_firmware","vendor":"dell"},{"product":"vostro_3669_firmware","vendor":"dell"},{"product":"vostro_3670_firmware","vendor":"dell"},{"product":"vostro_3671_firmware","vendor":"dell"},{"product":"vostro_3681_firmware","vendor":"dell"},{"product":"vostro_3881_firmware","vendor":"dell"},{"product":"vostro_3888_firmware","vendor":"dell"},{"product":"vostro_5090_firmware","vendor":"dell"},{"product":"vostro_5300_firmware","vendor":"dell"},{"product":"vostro_5370_firmware","vendor":"dell"},{"product":"vostro_5390_firmware","vendor":"dell"},{"product":"vostro_5391_firmware","vendor":"dell"},{"product":"vostro_5471_firmware","vendor":"dell"},{"product":"vostro_5481_firmware","vendor":"dell"},{"product":"vostro_5490_firmware","vendor":"dell"},{"product":"vostro_5581_firmware","vendor":"dell"},{"product":"vostro_5590_firmware","vendor":"dell"},{"product":"vostro_5880_firmware","vendor":"dell"},{"product":"vostro_7500_firmware","vendor":"dell"},{"product":"vostro_7590_firmware","vendor":"dell"},{"product":"wyse_5070_thin_client_firmware","vendor":"dell"},{"product":"wyse_5470_all-in-one_firmware","vendor":"dell"},{"product":"wyse_5470_firmware","vendor":"dell"},{"product":"wyse_7040_thin_client_firmware","vendor":"dell"},{"product":"xps_12_9250_firmware","vendor":"dell"},{"product":"xps_13_2-in-1_9365_firmware","vendor":"dell"},{"product":"xps_13_9300_firmware","vendor":"dell"},{"product":"xps_13_9360_firmware","vendor":"dell"},{"product":"xps_13_9370_firmware","vendor":"dell"},{"product":"xps_13_9380_firmware","vendor":"dell"},{"product":"xps_15_2-in-1_9575_firmware","vendor":"dell"},{"product":"xps_15_7500_firmware","vendor":"dell"},{"product":"xps_15_9560_firmware","vendor":"dell"},{"product":"xps_15_9570_firmware","vendor":"dell"},{"product":"xps_27_aio_7760_firmware","vendor":"dell"},{"product":"xps_7380_firmware","vendor":"dell"},{"product":"xps_7390_2-in-1_firmware","vendor":"dell"},{"product":"xps_8900_firmware","vendor":"dell"}],"cvss":{"score":7.1,"severity":"high","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H","version":"3.1"},"cwes":[{"id":"CWE-862","name":"Missing Authorization"},{"id":"CWE-285","name":"Improper Authorization"}],"description":"Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Missing authorization in Dell Client Consumer and Commercial platforms","id":"CVE-2020-5362","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"dell:chengming_3980_firmware","products":["dell:chengming_3980_firmware","dell:chengming_3990_firmware","dell:chengming_3991_firmware","dell:embedded_box_pc_5000_firmware","dell:inspiron_3470_firmware","dell:inspiron_3480_firmware","dell:inspiron_3481_firmware","dell:inspiron_3493_firmware","dell:inspiron_3580_firmware","dell:inspiron_3581_firmware","dell:inspiron_3593_firmware","dell:inspiron_3670_firmware","dell:inspiron_3780_firmware","dell:inspiron_3781_firmware","dell:inspiron_3793_firmware","dell:inspiron_3880_firmware","dell:inspiron_3881_firmware","dell:inspiron_5493_firmware","dell:inspiron_5593_firmware","dell:inspiron_7490_firmware","dell:inspiron_7500_firmware","dell:inspiron_7501_firmware","dell:inspiron_7590_firmware","dell:inspiron_7591_firmware","dell:latitude_3180_firmware","dell:latitude_3189_firmware","dell:latitude_3190_2-in-1_firmware","dell:latitude_3190_firmware","dell:latitude_3300_firmware","dell:latitude_3301_firmware","dell:latitude_3310_2-in-1_firmware","dell:latitude_3310_firmware","dell:latitude_3490_firmware","dell:latitude_3590_firmware","dell:latitude_5280_firmware","dell:latitude_5290_2-in-1_firmware","dell:latitude_5290_firmware","dell:latitude_5300_2-in-1_firmware","dell:latitude_5310_firmware","dell:latitude_5410_firmware","dell:latitude_5411_firmware","dell:latitude_5420_rugged_firmware","dell:latitude_5480_firmware","dell:latitude_5488_firmware","dell:latitude_5490_firmware","dell:latitude_5491_firmware","dell:latitude_5510_firmware","dell:latitude_5511_firmware","dell:latitude_5580_firmware","dell:latitude_5590_firmware","dell:latitude_5591_firmware","dell:latitude_7212_rugged_extreme_tablet_firmware","dell:latitude_7290_firmware","dell:latitude_7310_firmware","dell:latitude_7380_firmware","dell:latitude_7390_2-in-1_firmware","dell:latitude_7390_firmware","dell:latitude_7410_firmware","dell:latitude_7424_rugged_extreme_firmware","dell:latitude_7480_firmware","dell:latitude_7490_firmware","dell:latitude_9410_firmware","dell:latitude_9510_firmware","dell:optiplex_3050_firmware","dell:optiplex_3060_firmware","dell:optiplex_3070_firmware","dell:optiplex_5050_firmware","dell:optiplex_5060_firmware","dell:optiplex_5070_firmware","dell:optiplex_5080_firmware","dell:optiplex_7060_firmware","dell:optiplex_7070_firmware","dell:optiplex_7080_firmware","dell:optiplex_xe3_firmware","dell:precision_3440_firmware","dell:precision_3520_firmware","dell:precision_3530_firmware","dell:precision_3541_firmware","dell:precision_3550_firmware","dell:precision_3551_firmware","dell:precision_3930_rack_firmware","dell:precision_5530_firmware","dell:precision_5540_firmware","dell:precision_5550_firmware","dell:precision_5820_tower_firmware","dell:precision_7520_firmware","dell:precision_7530_firmware","dell:precision_7720_firmware","dell:precision_7730_firmware","dell:vostro_3070_firmware","dell:vostro_3267_firmware","dell:vostro_3268_firmware","dell:vostro_3470_firmware","dell:vostro_3480_firmware","dell:vostro_3580_firmware","dell:vostro_3581_firmware","dell:vostro_3583_firmware","dell:vostro_3584_firmware","dell:vostro_3590_firmware","dell:vostro_3667_firmware","dell:vostro_3668_firmware","dell:vostro_3669_firmware","dell:vostro_3670_firmware","dell:vostro_3681_firmware","dell:vostro_3881_firmware","dell:vostro_3888_firmware","dell:vostro_5880_firmware","dell:vostro_7500_firmware","dell:vostro_7590_firmware","dell:wyse_5470_firmware","dell:xps_13_9380_firmware"],"type":"missing_authorization","year":"2020"},"n_packages":0,"n_references":1,"next":{"headline":"Auth bypass in Dell Client Consumer and Commercial platforms","id":"CVE-2020-5363"},"packages":[],"prev":{"headline":"Security feature bypass in CPG BIOS","id":"CVE-2020-5361"},"products":["Dell Client Consumer and Commercial platforms"],"published":"2020-06-10","related":[{"cvss_score":7.1,"headline":"Security feature bypass in Dell Client Commercial and Consumer platforms","id":"CVE-2019-3717","kev_date_added":null,"published":"2019-08-05"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2024-09-17","vendors":["Dell"]},"summary":"Local attackers with admin privileges can bypass BIOS authentication to reset configuration to defaults on Dell platforms.","url":"https://insights.sbomify.com/CVE-2020-5362/"}