CVE-2020-5326

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-21 · updated 2026-06-17
Weakness: CWE-306

Description

Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settings without requiring the BIOS Admin password by selecting the Optimized Defaults option in the pre-boot iRST Manager.

Affected products

Dell Chengming 3980 Firmware: before 2.13.0 — fixed in 2.13.0
Dell Embedded Box Pc 5000 Firmware: before 1.6.0 — fixed in 1.6.0
Dell G3 3579 Firmware: before 1.10.0 — fixed in 1.10.0
Dell G3 3590 Firmware: before 1.4.3 — fixed in 1.4.3
Dell G3 3779 Firmware: before 1.10.0 — fixed in 1.10.0
Dell G5 5587 Firmware: before 1.11.1 — fixed in 1.11.1
Dell G5 5590 Firmware: before 1.8.0 — fixed in 1.8.0
Dell G7 7588 Firmware: before 1.11.1 — fixed in 1.11.1
Dell G7 7590 Firmware: before 1.8.0 — fixed in 1.8.0
Dell G7 7790 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Inspiron 14 Gaming 7466 Firmware: before 1.5.0 — fixed in 1.5.0
Dell Inspiron 14 Gaming 7467 Firmware: before 1.10.0 — fixed in 1.10.0
Dell Inspiron 15 7572 Firmware: before 1.2.1 — fixed in 1.2.1
Dell Inspiron 15 Gaming 7566 Firmware: before 1.5.0 — fixed in 1.5.0
Dell Inspiron 15 Gaming 7567 Firmware: before 1.10.0 — fixed in 1.10.0
Dell Inspiron 15 Gaming 7577 Firmware: before 1.8.0 — fixed in 1.8.0
Dell Inspiron 3470 Firmware: before 2.13.0 — fixed in 2.13.0
Dell Inspiron 3480 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Inspiron 3481 Firmware: before 1.4.0 — fixed in 1.4.0
Dell Inspiron 3580 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Inspiron 3581 Firmware: before 1.4.0 — fixed in 1.4.0
Dell Inspiron 3583 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Inspiron 3584 Firmware: before 1.4.0 — fixed in 1.4.0
Dell Inspiron 3670 Firmware: before 2.13.0 — fixed in 2.13.0
Dell Inspiron 3780 Firmware: before 1.5.1 — fixed in 1.5.1
Dell Inspiron 3781 Firmware: before 1.4.0 — fixed in 1.4.0
Dell Inspiron 5370 Firmware: before 1.12.0 — fixed in 1.12.0
Dell Inspiron 5480 Firmware: before 2.4.0 — fixed in 2.4.0
Dell Inspiron 5481 Firmware: before 2.4.0 — fixed in 2.4.0
Dell Inspiron 5482 Firmware: before 2.4.0 — fixed in 2.4.0

How to fix

Upgrade to a fixed version: Dell Chengming 3980 Firmware 2.13.0; Dell Embedded Box Pc 5000 Firmware 1.6.0; Dell G3 3579 Firmware 1.10.0; Dell G3 3590 Firmware 1.4.3; Dell G3 3779 Firmware 1.10.0; Dell G5 5587 Firmware 1.11.1; Dell G5 5590 Firmware 1.8.0; Dell G7 7588 Firmware 1.11.1; Dell G7 7590 Firmware 1.8.0; Dell G7 7790 Firmware 1.8.0; Dell Inspiron 14 Gaming 7466 Firmware 1.5.0; Dell Inspiron 14 Gaming 7467 Firmware 1.10.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-5326 or the next vulnerability affects your stack