7.1
Élevée
CVE-2020-5357 Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File…
Description
Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File Overwrite vulnerability. The vulnerability is limited to the Dell Dock Firmware Update Utilities during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CPG BIOS 1.0 | premières → < 1.0.8 | 1.0.8 |
Autres CVE de CPG BIOS
Les 110 CVE de CPG BIOS →
CVE-2024-0158
Dell BIOS contains an improper input validation vulnerability
5.1
Moyenne
CVE-2024-32855
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component
3.8
Faible
CVE-2024-32860
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
Élevée
CVE-2024-32858
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component
7.5
Élevée