Details of VAR-202006-1573

ID

VAR-202006-1573

CVE

CVE-2020-5362

TITLE

Select Dell Client Consumer and Commercial Vulnerability in lack of authentication on platform

Trust: 0.8

sources: JVNDB: JVNDB-2020-006895

DESCRIPTION

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values. Select Dell Client Consumer and Commercial The platform is vulnerable to lack of authentication.Information may be tampered with

Trust: 1.62

sources: NVD: CVE-2020-5362 // JVNDB: JVNDB-2020-006895

AFFECTED PRODUCTS

vendor:	dell	model:	inspiron 13 2-in-1 5378	scope:	lt	version:	1.30.0	Trust: 1.0
vendor:	dell	model:	latitude 3190	scope:	lt	version:	1.11.2	Trust: 1.0
vendor:	dell	model:	latitude 3190 2-in-1	scope:	lt	version:	1.11.2	Trust: 1.0
vendor:	dell	model:	latitude 7310	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	precision 7920 tower	scope:	lt	version:	2.7.2	Trust: 1.0
vendor:	dell	model:	latitude 5590	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	latitude 7424 rugged extreme	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	inspiron 7472	scope:	lt	version:	1.5.2	Trust: 1.0
vendor:	dell	model:	precision 5540	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	inspiron 5457	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 7590	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	inspiron 7591	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	latitude 7390 2-in-1	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	vostro 15 5568	scope:	lt	version:	1.13.2	Trust: 1.0
vendor:	dell	model:	inspiron 15 7570	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	latitude 5550	scope:	lt	version:	a24	Trust: 1.0
vendor:	dell	model:	g7 15 7590	scope:	lt	version:	1.13.2	Trust: 1.0
vendor:	dell	model:	precision 3420 tower	scope:	lt	version:	2.16.0	Trust: 1.0
vendor:	dell	model:	inspiron 5593	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	chengming 3988	scope:	lt	version:	1.3.0	Trust: 1.0
vendor:	dell	model:	latitude 9510	scope:	lt	version:	1.1.2	Trust: 1.0
vendor:	dell	model:	latitude 9410	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	optiplex 5260 aio	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	latitude 3390 2-in-1	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	inspiron 7591 2 in 1	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	inspiron 3590	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	inspiron 3670	scope:	lt	version:	2.16.0	Trust: 1.0
vendor:	dell	model:	inspiron 7391 2 in 1	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	inspiron 13 2-in-1 7359	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	vostro 15 7580	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	optiplex 7460 aio	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	inspiron 3880	scope:	lt	version:	1.1.3	Trust: 1.0
vendor:	dell	model:	vostro 3558	scope:	lt	version:	a17	Trust: 1.0
vendor:	dell	model:	vostro 3471	scope:	lt	version:	1.3.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 2-in-1 7573	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	optiplex aio 7770	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	vostro 15 7570	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	latitude 5280 mobile thin client	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	inspiron 5557	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	precision 7720	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	latitude 5480	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	vostro 5481	scope:	lt	version:	2.8.0	Trust: 1.0
vendor:	dell	model:	optiplex 3060	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	latitude 7480	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	chengming 3980	scope:	lt	version:	2.16.0	Trust: 1.0
vendor:	dell	model:	xps 13 9360	scope:	lt	version:	2.14.1	Trust: 1.0
vendor:	dell	model:	inspiron 5300	scope:	lt	version:	1.1.0	Trust: 1.0
vendor:	dell	model:	vostro 3671	scope:	lt	version:	1.3.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 gaming 7577	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	optiplex 7071 tower	scope:	lt	version:	1.4.0	Trust: 1.0
vendor:	dell	model:	latitude 5300 2-in-1	scope:	lt	version:	1.10.2	Trust: 1.0
vendor:	dell	model:	precision 5510	scope:	lt	version:	1.14.2	Trust: 1.0
vendor:	dell	model:	latitude 5290	scope:	lt	version:	1.12.1	Trust: 1.0
vendor:	dell	model:	inspiron 15 2-in-1 7579	scope:	lt	version:	1.30.0	Trust: 1.0
vendor:	dell	model:	latitude 3470	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	g5 5587	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	inspiron 5583	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	optiplex 5060	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	precision 7510	scope:	lt	version:	1.21.3	Trust: 1.0
vendor:	dell	model:	precision 7710	scope:	lt	version:	1.21.3	Trust: 1.0
vendor:	dell	model:	latitude 7414 rugged	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	inspiron 5594	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	vostro 5390	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	latitude 3510	scope:	lt	version:	1.2.0	Trust: 1.0
vendor:	dell	model:	inspiron 5400 2 in1	scope:	lt	version:	1.0.1	Trust: 1.0
vendor:	dell	model:	inspiron 7386	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	vostro 3591	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 5480	scope:	lt	version:	2.8.0	Trust: 1.0
vendor:	dell	model:	inspiron 7586	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	latitude 7410	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	vostro 3580	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	inspiron 5494	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	latitude 3310	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	embedded box pc 5000	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	latitude 3570	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	inspiron 17 2-in-1 7779	scope:	lt	version:	1.30.0	Trust: 1.0
vendor:	dell	model:	vostro 5370	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	precision 7730	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	xps 15 2-in-1 9575	scope:	lt	version:	1.12.1	Trust: 1.0
vendor:	dell	model:	optiplex 3046	scope:	lt	version:	1.9.1	Trust: 1.0
vendor:	dell	model:	optiplex 7760 aio	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	precision 3430	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	vostro 3458	scope:	lt	version:	a17	Trust: 1.0
vendor:	dell	model:	inspiron 7300 2 in 1	scope:	lt	version:	1.0.1	Trust: 1.0
vendor:	dell	model:	precision 3440	scope:	lt	version:	1.0.3	Trust: 1.0
vendor:	dell	model:	inspiron 5759	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	vostro 14 3468	scope:	lt	version:	3.6.0	Trust: 1.0
vendor:	dell	model:	latitude 5288	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	latitude 5285	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	g7 17 7790	scope:	lt	version:	1.13.2	Trust: 1.0
vendor:	dell	model:	inspiron 14 5468	scope:	lt	version:	1.12.1	Trust: 1.0
vendor:	dell	model:	inspiron 5582	scope:	lt	version:	2.8.0	Trust: 1.0
vendor:	dell	model:	g3 15 3590	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	precision 3620 tower	scope:	lt	version:	2.16.0	Trust: 1.0
vendor:	dell	model:	chengming 3977	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	vostro 3268	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	optiplex 7080	scope:	lt	version:	1.0.7	Trust: 1.0
vendor:	dell	model:	latitude 5420 rugged	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	inspiron 3581	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	vostro 3668	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	inspiron 5570	scope:	lt	version:	1.2.6	Trust: 1.0
vendor:	dell	model:	inspiron 5591 2-in-1	scope:	lt	version:	1.6.2	Trust: 1.0
vendor:	dell	model:	vostro 5300	scope:	lt	version:	1.1.0	Trust: 1.0
vendor:	dell	model:	vostro 5391	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 14 3468	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	inspiron 3780	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	latitude 5179	scope:	lt	version:	1.7.2	Trust: 1.0
vendor:	dell	model:	inspiron 3493	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 5390	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	xps 15 9560	scope:	lt	version:	1.19.2	Trust: 1.0
vendor:	dell	model:	inspiron 15 5567	scope:	lt	version:	1.2.11	Trust: 1.0
vendor:	dell	model:	inspiron 3584	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 5590	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	precision 7820 tower	scope:	lt	version:	2.7.2	Trust: 1.0
vendor:	dell	model:	inspiron 5770	scope:	lt	version:	1.2.6	Trust: 1.0
vendor:	dell	model:	optiplex 3050	scope:	lt	version:	1.13.3	Trust: 1.0
vendor:	dell	model:	inspiron 3576	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	inspiron 14 gaming 7466	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	precision 5520	scope:	lt	version:	1.19.2	Trust: 1.0
vendor:	dell	model:	vostro 5490	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	xps 7390 2-in-1	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	vostro 3267	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	optiplex 3050 aio	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	vostro 15 3578	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	precision 3510	scope:	lt	version:	1.23.3	Trust: 1.0
vendor:	dell	model:	latitude 5175	scope:	lt	version:	1.7.2	Trust: 1.0
vendor:	dell	model:	inspiron 15 2-in-1 5579	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	vostro 5090	scope:	lt	version:	1.4.0	Trust: 1.0
vendor:	dell	model:	optiplex aio 7470	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	xps 13 2-in-1 9365	scope:	lt	version:	2.11.0	Trust: 1.0
vendor:	dell	model:	optiplex 5050	scope:	lt	version:	1.13.3	Trust: 1.0
vendor:	dell	model:	precision 3520	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	inspiron 7500 2 in 1	scope:	eq	version:	-	Trust: 1.0
vendor:	dell	model:	optiplex 3070	scope:	lt	version:	1.4.2	Trust: 1.0
vendor:	dell	model:	vostro 3491	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	latitude 7285	scope:	lt	version:	1.8.1	Trust: 1.0
vendor:	dell	model:	vostro 3590	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	g3 15 3500	scope:	lt	version:	1.2.1	Trust: 1.0
vendor:	dell	model:	inspiron 3593	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	latitude 7350	scope:	lt	version:	a20	Trust: 1.0
vendor:	dell	model:	vostro 3480	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	latitude 7212 rugged extreme tablet	scope:	lt	version:	1.30.0	Trust: 1.0
vendor:	dell	model:	vostro 5581	scope:	lt	version:	2.8.0	Trust: 1.0
vendor:	dell	model:	xps 8900	scope:	lt	version:	2.8.0	Trust: 1.0
vendor:	dell	model:	vostro 3490	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	inspiron 14 3459	scope:	lt	version:	1.12.0	Trust: 1.0
vendor:	dell	model:	optiplex 7780 aio	scope:	lt	version:	1.0.2	Trust: 1.0
vendor:	dell	model:	latitude 3301	scope:	lt	version:	1.12.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 2-in-1 7569	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	latitude 5280	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	wyse 5070 thin client	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	latitude 5490	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	optiplex 5480 aio	scope:	lt	version:	1.0.1	Trust: 1.0
vendor:	dell	model:	latitude 5289	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	inspiron 7580	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	precision 3551	scope:	lt	version:	1.1.5	Trust: 1.0
vendor:	dell	model:	vostro 3881	scope:	lt	version:	1.1.3	Trust: 1.0
vendor:	dell	model:	precision 5530	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	precision 5550	scope:	lt	version:	1.1.3	Trust: 1.0
vendor:	dell	model:	inspiron 13 7370	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 2-in-1 5568	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	inspiron 11 2-in-1 3158	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	latitude 3180	scope:	lt	version:	1.12.0	Trust: 1.0
vendor:	dell	model:	optiplex xe3	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	inspiron 3790	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	precision 3930 rack	scope:	lt	version:	2.6.2	Trust: 1.0
vendor:	dell	model:	inspiron 15 7560	scope:	lt	version:	1.13.2	Trust: 1.0
vendor:	dell	model:	inspiron 14 7460	scope:	lt	version:	1.13.2	Trust: 1.0
vendor:	dell	model:	inspiron 7500	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	latitude 7490	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	inspiron 3781	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 7380	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	latitude 7214 rugged extreme	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	inspiron 7490	scope:	lt	version:	1.5.0	Trust: 1.0
vendor:	dell	model:	latitude 5491	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	latitude 3379	scope:	lt	version:	1.0.28	Trust: 1.0
vendor:	dell	model:	inspiron 3268	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	inspiron 5459	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 5598	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	latitude e5470	scope:	lt	version:	1.23.3	Trust: 1.0
vendor:	dell	model:	latitude 3350	scope:	lt	version:	a18	Trust: 1.0
vendor:	dell	model:	g3 3579	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 gaming 7566	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	inspiron 14 gaming 7467	scope:	lt	version:	1.12.1	Trust: 1.0
vendor:	dell	model:	inspiron 7790 aio	scope:	lt	version:	1.6.1	Trust: 1.0
vendor:	dell	model:	latitude 7210 2 in 1	scope:	lt	version:	1.1.2	Trust: 1.0
vendor:	dell	model:	latitude 7389	scope:	lt	version:	1.21.0	Trust: 1.0
vendor:	dell	model:	inspiron 7501	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	latitude 3460 mobile thin client	scope:	lt	version:	a19	Trust: 1.0
vendor:	dell	model:	latitude e7470	scope:	lt	version:	1.24.3	Trust: 1.0
vendor:	dell	model:	chengming 3967	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 7590 2 in 1	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	optiplex 5040	scope:	lt	version:	1.16.0	Trust: 1.0
vendor:	dell	model:	precision 5530 2-in 1	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	precision 3640 tower	scope:	lt	version:	1.0.1	Trust: 1.0
vendor:	dell	model:	vostro 5880	scope:	lt	version:	1.0.3	Trust: 1.0
vendor:	dell	model:	latitude e7270	scope:	lt	version:	1.24.3	Trust: 1.0
vendor:	dell	model:	latitude 5580	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	wyse 5470 all-in-one	scope:	lt	version:	1.5.2	Trust: 1.0
vendor:	dell	model:	latitude 5488	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	xps 12 9250	scope:	lt	version:	1.7.2	Trust: 1.0
vendor:	dell	model:	latitude 5250	scope:	lt	version:	a24	Trust: 1.0
vendor:	dell	model:	chengming 3990	scope:	lt	version:	1.1.3	Trust: 1.0
vendor:	dell	model:	latitude 5310	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	vostro 15 3568	scope:	lt	version:	3.6.0	Trust: 1.0
vendor:	dell	model:	vostro 3559	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	inspiron 11 2-in-1 3153	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	xps 13 9380	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 3568	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	vostro 3459	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	chengming 3991	scope:	lt	version:	1.1.3	Trust: 1.0
vendor:	dell	model:	inspiron 3476	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	inspiron 14 3467	scope:	lt	version:	2.12.0	Trust: 1.0
vendor:	dell	model:	latitude e5270	scope:	lt	version:	1.23.3	Trust: 1.0
vendor:	dell	model:	latitude 3460	scope:	lt	version:	a19	Trust: 1.0
vendor:	dell	model:	inspiron 13 2-in-1 7353	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	inspiron 5490 aio	scope:	lt	version:	1.6.1	Trust: 1.0
vendor:	dell	model:	latitude 5411	scope:	lt	version:	1.1.5	Trust: 1.0
vendor:	dell	model:	precision 7530	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	vostro 3481	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 13 2-in-1 5379	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	precision 7820	scope:	lt	version:	2.7.2	Trust: 1.0
vendor:	dell	model:	vostro 3681	scope:	lt	version:	1.1.3	Trust: 1.0
vendor:	dell	model:	optiplex 7060	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	latitude 5450	scope:	lt	version:	a24	Trust: 1.0
vendor:	dell	model:	latitude 7390	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	xps 15 9570	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	g7 7588	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	vostro 3584	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	latitude 3480	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	latitude 5410	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	inspiron 14 5490	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	optiplex 7450	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	vostro 7590	scope:	lt	version:	1.7.0	Trust: 1.0
vendor:	dell	model:	inspiron 7391	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	optiplex 7050	scope:	lt	version:	1.13.3	Trust: 1.0
vendor:	dell	model:	inspiron 3480	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	g5 5090	scope:	lt	version:	1.3.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 2-in-1 7568	scope:	lt	version:	1.25.0	Trust: 1.0
vendor:	dell	model:	inspiron 5370	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	optiplex 5270 aio	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	inspiron 5584	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	latitude 5510	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	latitude 3560	scope:	lt	version:	a19	Trust: 1.0
vendor:	dell	model:	inspiron 15 3567	scope:	lt	version:	2.12.0	Trust: 1.0
vendor:	dell	model:	latitude e7270 mobile thin client	scope:	lt	version:	1.24.3	Trust: 1.0
vendor:	dell	model:	inspiron 5391	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	optiplex 7480 aio	scope:	lt	version:	1.0.2	Trust: 1.0
vendor:	dell	model:	latitude 3480 mobile thin client	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	inspiron 3481	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	latitude 3490	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	optiplex 5080	scope:	lt	version:	1.0.7	Trust: 1.0
vendor:	dell	model:	inspiron 15 gaming 7567	scope:	lt	version:	1.12.1	Trust: 1.0
vendor:	dell	model:	optiplex 5070	scope:	lt	version:	1.4.2	Trust: 1.0
vendor:	dell	model:	inspiron 17 2-in-1 7778	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	wyse 5470	scope:	lt	version:	1.4.0	Trust: 1.0
vendor:	dell	model:	insprion 5491 aio	scope:	lt	version:	1.6.1	Trust: 1.0
vendor:	dell	model:	latitude e5250	scope:	lt	version:	a24	Trust: 1.0
vendor:	dell	model:	latitude 7380	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	precision 5820 tower	scope:	lt	version:	2.3.0	Trust: 1.0
vendor:	dell	model:	optiplex 3280 aio	scope:	lt	version:	1.0.2	Trust: 1.0
vendor:	dell	model:	inspiron 13 2-in-1 7378	scope:	lt	version:	1.30.0	Trust: 1.0
vendor:	dell	model:	precision 3550	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	vostro 3070	scope:	lt	version:	2.16.0	Trust: 1.0
vendor:	dell	model:	inspiron 5498	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	latitude e7250	scope:	lt	version:	a24	Trust: 1.0
vendor:	dell	model:	inspiron 13 2-in-1 5368	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	vostro 3660	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	inspiron 3471	scope:	lt	version:	1.3.0	Trust: 1.0
vendor:	dell	model:	latitude e5450	scope:	lt	version:	a24	Trust: 1.0
vendor:	dell	model:	precision tower 3431 small form factor	scope:	lt	version:	1.4.0	Trust: 1.0
vendor:	dell	model:	vostro 3581	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	vostro 14 3478	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	inspiron 3583	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	xps 7380	scope:	lt	version:	1.6.0	Trust: 1.0
vendor:	dell	model:	latitude e5550	scope:	lt	version:	a24	Trust: 1.0
vendor:	dell	model:	latitude 3580	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	inspiron 7390 2 in 1	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	vostro 5471	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	optiplex 3040	scope:	lt	version:	1.12.2	Trust: 1.0
vendor:	dell	model:	latitude 5310 2 in 1	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	g3 3779	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	vostro 3667	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	inspiron 5580	scope:	lt	version:	2.8.0	Trust: 1.0
vendor:	dell	model:	precision 3630 tower	scope:	lt	version:	2.6.0	Trust: 1.0
vendor:	dell	model:	inspiron 3793	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 2-in-1 5578	scope:	lt	version:	1.30.0	Trust: 1.0
vendor:	dell	model:	latitude 3380	scope:	lt	version:	1.12.0	Trust: 1.0
vendor:	dell	model:	precision 5720 aio	scope:	lt	version:	2.6.1	Trust: 1.0
vendor:	dell	model:	optiplex 3240 aio	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	inspiron 3881	scope:	lt	version:	1.0.3	Trust: 1.0
vendor:	dell	model:	g5 15 5500	scope:	lt	version:	1.2.1	Trust: 1.0
vendor:	dell	model:	latitude 3310 2-in-1	scope:	lt	version:	1.4.0	Trust: 1.0
vendor:	dell	model:	precision 7920	scope:	lt	version:	2.7.2	Trust: 1.0
vendor:	dell	model:	g5 15 5590	scope:	lt	version:	1.13.2	Trust: 1.0
vendor:	dell	model:	xps 13 9300	scope:	lt	version:	1.0.11	Trust: 1.0
vendor:	dell	model:	inspiron 15 7572	scope:	lt	version:	1.5.2	Trust: 1.0
vendor:	dell	model:	inspiron 5482	scope:	lt	version:	2.8.0	Trust: 1.0
vendor:	dell	model:	optiplex 5250	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	inspiron 3580	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	latitude 3500	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	latitude 5424 rugged	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	latitude 7290	scope:	lt	version:	1.15.0	Trust: 1.0
vendor:	dell	model:	xps 15 7500	scope:	lt	version:	1.1.3	Trust: 1.0
vendor:	dell	model:	inspiron 14 3473	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 17 5767	scope:	lt	version:	1.2.11	Trust: 1.0
vendor:	dell	model:	latitude 7275	scope:	lt	version:	1.7.2	Trust: 1.0
vendor:	dell	model:	xps 13 9370	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	inspiron 5559	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	latitude 3300	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 13 2-in-1 7373	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	inspiron 7786	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	optiplex 7040	scope:	lt	version:	1.17.0	Trust: 1.0
vendor:	dell	model:	latitude 7370	scope:	lt	version:	1.19.5	Trust: 1.0
vendor:	dell	model:	vostro 3583	scope:	lt	version:	1.11.0	Trust: 1.0
vendor:	dell	model:	vostro 3669	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	vostro 3888	scope:	lt	version:	1.1.3	Trust: 1.0
vendor:	dell	model:	vostro 14 5468	scope:	lt	version:	1.13.2	Trust: 1.0
vendor:	dell	model:	inspiron 15 3559	scope:	lt	version:	1.12.0	Trust: 1.0
vendor:	dell	model:	latitude 3400	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	latitude 5290 2-in-1	scope:	lt	version:	1.12.1	Trust: 1.0
vendor:	dell	model:	xps 27 aio 7760	scope:	lt	version:	2.6.1	Trust: 1.0
vendor:	dell	model:	vostro 3470	scope:	lt	version:	2.16.0	Trust: 1.0
vendor:	dell	model:	precision 3530	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	inspiron 15-3552	scope:	lt	version:	a21	Trust: 1.0
vendor:	dell	model:	inspiron 17 2-in-1 7773	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	latitude 5511	scope:	lt	version:	1.1.5	Trust: 1.0
vendor:	dell	model:	vostro 5590	scope:	lt	version:	1.10.0	Trust: 1.0
vendor:	dell	model:	latitude 3410	scope:	lt	version:	1.2.0	Trust: 1.0
vendor:	dell	model:	optiplex 7440 aio	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	inspiron 3668	scope:	lt	version:	1.14.0	Trust: 1.0
vendor:	dell	model:	vostro 3670	scope:	lt	version:	2.16.0	Trust: 1.0
vendor:	dell	model:	optiplex 7070	scope:	lt	version:	1.4.2	Trust: 1.0
vendor:	dell	model:	inspiron 3671	scope:	lt	version:	1.3.0	Trust: 1.0
vendor:	dell	model:	inspiron 3470	scope:	lt	version:	2.16.0	Trust: 1.0
vendor:	dell	model:	latitude 7250	scope:	lt	version:	a24	Trust: 1.0
vendor:	dell	model:	inspiron 5491 2 in 1	scope:	lt	version:	1.6.2	Trust: 1.0
vendor:	dell	model:	precision 3541	scope:	lt	version:	1.9.1	Trust: 1.0
vendor:	dell	model:	inspiron 3490	scope:	lt	version:	1.8.0	Trust: 1.0
vendor:	dell	model:	inspiron 14 3458	scope:	lt	version:	a21	Trust: 1.0
vendor:	dell	model:	latitude 5414 rugged	scope:	lt	version:	1.26.0	Trust: 1.0
vendor:	dell	model:	latitude 3590	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	latitude e7450	scope:	lt	version:	a24	Trust: 1.0
vendor:	dell	model:	latitude 5591	scope:	lt	version:	1.13.0	Trust: 1.0
vendor:	dell	model:	inspiron 5481	scope:	lt	version:	2.8.0	Trust: 1.0
vendor:	dell	model:	inspiron 15 5566	scope:	lt	version:	1.12.1	Trust: 1.0
vendor:	dell	model:	inspiron 5493	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	vostro 7500	scope:	lt	version:	1.1.1	Trust: 1.0
vendor:	dell	model:	wyse 7040 thin client	scope:	lt	version:	1.9.0	Trust: 1.0
vendor:	dell	model:	inspiron 13 2-in-1 7368	scope:	lt	version:	1.22.0	Trust: 1.0
vendor:	dell	model:	latitude 7280	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	latitude 3189	scope:	lt	version:	1.12.0	Trust: 1.0
vendor:	dell	model:	precision 7520	scope:	lt	version:	1.18.0	Trust: 1.0
vendor:	dell	model:	latitude e5570	scope:	lt	version:	1.23.3	Trust: 1.0
vendor:	dell	model:	chengming 3967	scope:	-	version:	-	Trust: 0.8
vendor:	dell	model:	chengming 3977	scope:	-	version:	-	Trust: 0.8
vendor:	dell	model:	chengming 3980	scope:	-	version:	-	Trust: 0.8
vendor:	dell	model:	chengming 3988	scope:	-	version:	-	Trust: 0.8
vendor:	dell	model:	chengming 3990	scope:	-	version:	-	Trust: 0.8
vendor:	dell	model:	chengming 3991	scope:	-	version:	-	Trust: 0.8
vendor:	dell	model:	g3 15	scope:	-	version:	-	Trust: 0.8
vendor:	dell	model:	g3 15 3590	scope:	-	version:	-	Trust: 0.8
vendor:	dell	model:	g3 3579	scope:	-	version:	-	Trust: 0.8
vendor:	dell	model:	g3 3779	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2020-006895 // NVD: CVE-2020-5362

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD:	CVE-2020-5362
value:	MEDIUM
Trust: 1.0
NVD:	JVNDB-2020-006895
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202006-879
value:	MEDIUM
Trust: 0.6

NVD:	CVE-2020-5362
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:N/I:P/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	FALSE
obtainAllPrivilege:	FALSE
obtainUserPrivilege:	FALSE
obtainOtherPrivilege:	FALSE
userInteractionRequired:	FALSE
version:	2.0
Trust: 1.0
NVD:	JVNDB-2020-006895
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:N/I:P/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8

NVD:	CVE-2020-5362
baseSeverity:	MEDIUM
baseScore:	4.4
vectorString:	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	0.8
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	JVNDB-2020-006895
baseSeverity:	MEDIUM
baseScore:	4.4
vectorString:	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2020-006895 // CNNVD: CNNVD-202006-879 // NVD: CVE-2020-5362

PROBLEMTYPE DATA

problemtype:

CWE-862

Trust: 1.8

sources: JVNDB: JVNDB-2020-006895 // NVD: CVE-2020-5362

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202006-879

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-202006-879

CONFIGURATIONS

sources: NVD: CVE-2020-5362

PATCH

title:

DSA-2020-120: Dell Client Platform Security Update for BIOS Restore Setup Default Admin Password Improper Authorization Vulnerability

url:

https://www.dell.com/support/article/en-us/sln321726/dsa-2020-120-dell-client-platform-security-update-for-bios-restore-setup-default-admin-password-improper-authorization-vulnerability?lang=en

Trust: 0.8

sources: JVNDB: JVNDB-2020-006895

EXTERNAL IDS

db:	NVD	id:	CVE-2020-5362	Trust: 2.4
db:	JVNDB	id:	JVNDB-2020-006895	Trust: 0.8
db:	CNNVD	id:	CNNVD-202006-879	Trust: 0.6

sources: JVNDB: JVNDB-2020-006895 // CNNVD: CNNVD-202006-879 // NVD: CVE-2020-5362

REFERENCES

url:	https://www.dell.com/support/article/sln321726	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2020-5362	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-5362	Trust: 0.8

sources: JVNDB: JVNDB-2020-006895 // CNNVD: CNNVD-202006-879 // NVD: CVE-2020-5362

SOURCES

db:	JVNDB	id:	JVNDB-2020-006895
db:	CNNVD	id:	CNNVD-202006-879
db:	NVD	id:	CVE-2020-5362

LAST UPDATE DATE

2022-05-04T09:28:07.312000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2020-006895	date:	2020-07-22T00:00:00
db:	CNNVD	id:	CNNVD-202006-879	date:	2020-06-30T00:00:00
db:	NVD	id:	CVE-2020-5362	date:	2020-06-23T15:44:00

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2020-006895	date:	2020-07-22T00:00:00
db:	CNNVD	id:	CNNVD-202006-879	date:	2020-06-10T00:00:00
db:	NVD	id:	CVE-2020-5362	date:	2020-06-10T21:15:00