CVE-2020-5326

6.1MEDIUM

Key Information:

Vendor
Dell
Status
Dell Client Consumer And Commercial Platforms
Vendor
CVE Published:
21 February 2020

Summary

Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settings without requiring the BIOS Admin password by selecting the Optimized Defaults option in the pre-boot iRST Manager.

Affected Version(s)

Dell Client Consumer and Commercial Platforms https://www.dell.com/support/article/SLN320337

References

https://www.dell.com/support/article/SLN320337
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.