Skip to content
Fencer Intel
high 7.1

CVE-2020-5362 json

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which…

published 6y ago modified 4mo ago also EUVD-2020-26544

cvss
7.1
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 21%
public exploits
0
none known

Summary

Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.

Patch / fix

  • dell chengming_3967_firmware 1.9.0
  • dell chengming_3977_firmware 1.9.0
  • dell chengming_3980_firmware 2.16.0
  • dell chengming_3988_firmware 1.3.0
  • dell chengming_3990_firmware 1.1.3
  • dell chengming_3991_firmware 1.1.3
  • dell g3_15_3500_firmware 1.2.1
  • dell g3_15_3590_firmware 1.11.0
  • dell g3_3579_firmware 1.13.0
  • dell g3_3779_firmware 1.13.0
  • dell g5_15_5500_firmware 1.2.1
  • dell g5_15_5590_firmware 1.13.2
  • dell g5_5587_firmware 1.14.0
  • dell g7_15_7590_firmware 1.13.2
  • dell g7_17_7790_firmware 1.13.2
  • dell g7_7588_firmware 1.14.0
  • dell embedded_box_pc_5000_firmware 1.8.0
  • dell g5_5090_firmware 1.3.0
  • dell inspiron_11_2-in-1_3153_firmware 1.25.0
  • dell inspiron_11_2-in-1_3158_firmware 1.25.0

Is CVE-2020-5362 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Exploit prediction

0.29% chance of exploitation in the next 30 days, higher than 21% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H
NVD 3.1 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
NVD 2.0 2.1 AV:L/AC:L/Au:N/C:N/I:P/A:N

Affected products

  • Dell Dell Client Consumer and Commercial platforms

Classification

Weakness

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.