Skip to content
Sign in
7.1 High

CVE-2020-5324 Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability

Description

Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.

Affected products and versions

Product Affected versions Fixed in
Dell Client Consumer and Commercial Platforms Versions not published

Other CVEs of Dell Client Consumer and Commercial Platforms

The 4 CVEs of Dell Client Consumer and Commercial Platforms →
CVE-2020-5363 Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be… 8.6 High CVE-2020-5362 Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell… 7.1 High CVE-2020-5326 Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot… 6.1 Medium
Track this CVE