VULNERABILITY INTELLIGENCE

CVE-2020-5363

CVSS score8.6 HIGH
EPSS probability0.32%
CISA KEVNot currently listed
Published2020-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Description

Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive.

Weakness classification

  • security_alert@emc.com: CWE-158
  • nvd@nist.gov: NVD-CWE-Other

Primary references