CVE-2020-5362

Severity: medium (CVSS 4.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-10 · updated 2026-06-17
Weakness: CWE-285

Description

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.

Affected products

Dell Chengming 3967 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Chengming 3977 Firmware: before 1.9.0 — fixed in 1.9.0
Dell Chengming 3980 Firmware: before 2.16.0 — fixed in 2.16.0
Dell Chengming 3988 Firmware: before 1.3.0 — fixed in 1.3.0
Dell Chengming 3990 Firmware: before 1.1.3 — fixed in 1.1.3
Dell Chengming 3991 Firmware: before 1.1.3 — fixed in 1.1.3
Dell Embedded Box Pc 5000 Firmware: before 1.8.0 — fixed in 1.8.0
Dell G3 15 3500 Firmware: before 1.2.1 — fixed in 1.2.1
Dell G3 15 3590 Firmware: before 1.11.0 — fixed in 1.11.0
Dell G3 3579 Firmware: before 1.13.0 — fixed in 1.13.0
Dell G3 3779 Firmware: before 1.13.0 — fixed in 1.13.0
Dell G5 15 5500 Firmware: before 1.2.1 — fixed in 1.2.1
Dell G5 15 5590 Firmware: before 1.13.2 — fixed in 1.13.2
Dell G5 5090 Firmware: before 1.3.0 — fixed in 1.3.0
Dell G5 5587 Firmware: before 1.14.0 — fixed in 1.14.0
Dell G7 15 7590 Firmware: before 1.13.2 — fixed in 1.13.2
Dell G7 17 7790 Firmware: before 1.13.2 — fixed in 1.13.2
Dell G7 7588 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Inspiron 11 2-In-1 3153 Firmware: before 1.25.0 — fixed in 1.25.0
Dell Inspiron 11 2-In-1 3158 Firmware: before 1.25.0 — fixed in 1.25.0
Dell Inspiron 13 2-In-1 5368 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Inspiron 13 2-In-1 5378 Firmware: before 1.30.0 — fixed in 1.30.0
Dell Inspiron 13 2-In-1 5379 Firmware: before 1.14.0 — fixed in 1.14.0
Dell Inspiron 13 2-In-1 7353 Firmware: before 1.25.0 — fixed in 1.25.0
Dell Inspiron 13 2-In-1 7359 Firmware: before 1.25.0 — fixed in 1.25.0
Dell Inspiron 13 2-In-1 7368 Firmware: before 1.22.0 — fixed in 1.22.0
Dell Inspiron 13 2-In-1 7373 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Inspiron 13 2-In-1 7378 Firmware: before 1.30.0 — fixed in 1.30.0
Dell Inspiron 13 7370 Firmware: before 1.17.0 — fixed in 1.17.0
Dell Inspiron 14 3458 Firmware: before a21 — fixed in a21

How to fix

Upgrade to a fixed version: Dell Chengming 3967 Firmware 1.9.0; Dell Chengming 3977 Firmware 1.9.0; Dell Chengming 3980 Firmware 2.16.0; Dell Chengming 3988 Firmware 1.3.0; Dell Chengming 3990 Firmware 1.1.3; Dell Chengming 3991 Firmware 1.1.3; Dell Embedded Box Pc 5000 Firmware 1.8.0; Dell G3 15 3500 Firmware 1.2.1; Dell G3 15 3590 Firmware 1.11.0; Dell G3 3579 Firmware 1.13.0; Dell G3 3779 Firmware 1.13.0; Dell G5 15 5500 Firmware 1.2.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-5362 or the next vulnerability affects your stack