CVE-2020-5379 - Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerabil

CVE-2020-5379

Summary

Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).

References

https://www.dell.com/support/article/SLN322616

Vulnerable Configurations

cpe:2.3:o:dell:inspiron_7352_bios:*:*:*:*:*:*:*:*
cpe:2.3:o:dell:inspiron_7352_bios:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7352:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:inspiron_7352:-:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 14-09-2020 - 15:19)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

misc

https://www.dell.com/support/article/SLN322616

Last major update

14-09-2020 - 15:19

Published

02-09-2020 - 21:15

Last modified

14-09-2020 - 15:19