8.6
High
CVE-2020-5363 Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be…
Description
Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Client Consumer and Commercial Platforms | Versions not published |
Other CVEs of Dell Client Consumer and Commercial Platforms
The 4 CVEs of Dell Client Consumer and Commercial Platforms →
CVE-2020-5362
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell…
7.1
High
CVE-2020-5326
Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot…
6.1
Medium
CVE-2020-5324
Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability
7.1
High