CVE-2020-5388

Severity: medium (CVSS 6.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-11-10 · updated 2026-06-17
Weakness: CWE-119

Description

Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

Affected products

Dell Inspiron 15 7579 Firmware: before 1.31.0 — fixed in 1.31.0

How to fix

Upgrade to a fixed version: Dell Inspiron 15 7579 Firmware 1.31.0. Check the vendor advisory for mitigations.

References

https://www.dell.com/support/article/en-us/sln322869/dsa-2020-215-dell-inspiron-15-7579-2-in-1-improper-smm-communication-buffer-boundary-verification-vulnerability
https://www.dell.com/support/article/en-us/sln322869/dsa-2020-215-dell-inspiron-15-7579-2-in-1-improper-smm-communication-buffer-boundary-verification-vulnerability

Get alerted when CVE-2020-5388 or the next vulnerability affects your stack