Threat Investigation
Request a demo

CVE-2020-5326

Medium

Description

Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settings without requiring the BIOS Admin password by selecting the Optimized Defaults option in the pre-boot iRST Manager.

SeverityMedium
CVSS6.1
Exploit probability—
ProductDell Chengming 3980 Firmware
PublishedFeb 21, 2020
First seenFeb 21, 2020
Weakness typeCWE-306Missing authentication for critical function

How to fix

Update
  • dell chengming_3980_firmware2.13.0 or later
  • dell g3_3579_firmware1.10.0 or later
  • dell g3_3590_firmware1.4.3 or later
  • dell g3_3779_firmware1.10.0 or later
  • dell g5_5587_firmware1.11.1 or later
  • dell g5_5590_firmware1.8.0 or later
  • dell g7_7588_firmware1.11.1 or later
  • dell g7_7590_firmware1.8.0 or later
  • dell g7_7790_firmware1.8.0 or later
  • dell embedded_box_pc_5000_firmware1.6.0 or later
  • dell inspiron_14_gaming_7466_firmware1.5.0 or later
  • dell inspiron_14_gaming_7467_firmware1.10.0 or later

Affected products

ProductAffected versionsFixed in
dell chengming_3980_firmwarev < 2.13.02.13.0
dell g3_3579_firmwarev < 1.10.01.10.0
dell g3_3590_firmwarev < 1.4.31.4.3
dell g3_3779_firmwarev < 1.10.01.10.0
dell g5_5587_firmwarev < 1.11.11.11.1
dell g5_5590_firmwarev < 1.8.01.8.0
dell g7_7588_firmwarev < 1.11.11.11.1
dell g7_7590_firmwarev < 1.8.01.8.0
dell g7_7790_firmwarev < 1.8.01.8.0
dell embedded_box_pc_5000_firmwarev < 1.6.01.6.0
dell inspiron_14_gaming_7466_firmwarev < 1.5.01.5.0
dell inspiron_14_gaming_7467_firmwarev < 1.10.01.10.0
dell inspiron_15_7572_firmwarev < 1.2.11.2.1
dell inspiron_15_gaming_7566_firmwarev < 1.5.01.5.0
dell inspiron_15_gaming_7567_firmwarev < 1.10.01.10.0
dell inspiron_15_gaming_7577_firmwarev < 1.8.01.8.0
dell inspiron_3470_firmwarev < 2.13.02.13.0
dell inspiron_3480_firmwarev < 1.5.11.5.1
dell inspiron_3481_firmwarev < 1.4.01.4.0
dell inspiron_3580_firmwarev < 1.5.11.5.1
dell inspiron_3581_firmwarev < 1.4.01.4.0
dell inspiron_3583_firmwarev < 1.5.11.5.1
dell inspiron_3584_firmwarev < 1.4.01.4.0
dell inspiron_3670_firmwarev < 2.13.02.13.0
dell inspiron_3780_firmwarev < 1.5.11.5.1
dell inspiron_3781_firmwarev < 1.4.01.4.0
dell inspiron_5370_firmwarev < 1.12.01.12.0
dell inspiron_5480_firmwarev < 2.4.02.4.0
dell inspiron_5481_firmwarev < 2.4.02.4.0
dell inspiron_5482_firmwarev < 2.4.02.4.0
dell inspiron_5488_firmwarev < 2.4.02.4.0
dell inspiron_5570_firmwarev < 1.2.31.2.3
dell inspiron_5580_firmwarev < 2.4.02.4.0
dell inspiron_5582_firmwarev < 2.4.02.4.0
dell inspiron_5770_firmwarev < 1.2.31.2.3
dell inspiron_7380_firmwarev < 1.8.01.8.0
dell inspiron_7386_firmwarev < 1.5.01.5.0
dell inspiron_7472_firmwarev < 1.2.11.2.1
dell inspiron_7580_firmwarev < 1.8.01.8.0
dell inspiron_7586_firmwarev < 1.5.01.5.0
dell inspiron_7590_firmwarev < 1.1.11.1.1
dell inspiron_7591_firmwarev < 1.1.11.1.1
dell inspiron_7786_firmwarev < 1.5.01.5.0
dell latitude_3300_firmwarev < 1.4.01.4.0
dell latitude_3460_firmwarev < a17a17
dell latitude_3480_firmwarev < 1.12.01.12.0
dell latitude_3490_firmwarev < 1.9.91.9.9
dell latitude_3580_firmwarev < 1.12.01.12.0
dell latitude_3590_firmwarev < 1.9.91.9.9
dell latitude_5175_firmwarev < 1.7.11.7.1
dell latitude_5179_firmwarev < 1.7.11.7.1
dell latitude_5280_firmwarev < 1.15.11.15.1
dell latitude_5288_firmwarev < 1.15.11.15.1
dell latitude_5289_firmwarev < 1.18.11.18.1
dell latitude_5290_firmwarev < 1.9.01.9.0
dell latitude_5300_firmwarev < 1.3.11.3.1
dell latitude_5400_firmwarev < 1.3.111.3.11
dell latitude_5401_firmwarev < 1.3.111.3.11
dell latitude_5414_firmwarev < 1.24.01.24.0
dell latitude_5420_rugged_firmwarev < 1.5.01.5.0
dell latitude_5424_rugged_firmwarev < 1.5.01.5.0
dell latitude_5480_firmwarev < 1.15.11.15.1
dell latitude_5488_firmwarev < 1.15.11.15.1
dell latitude_5490_firmwarev < 1.9.01.9.0
dell latitude_5491_firmwarev < 1.8.11.8.1
dell latitude_5500_firmwarev < 1.3.111.3.11
dell latitude_5501_firmwarev < 1.2.111.2.11
dell latitude_5580_firmwarev < 1.15.11.15.1
dell latitude_5590_firmwarev < 1.9.01.9.0
dell latitude_5591_firmwarev < 1.8.11.8.1
dell latitude_7202_firmwarev < a24a24
dell latitude_7212_firmwarev < 1.26.01.26.0
dell latitude_7214_firmwarev < 1.24.01.24.0
dell latitude_7275_firmwarev < 1.6.11.6.1
dell latitude_7280_firmwarev < 1.15.11.15.1
dell latitude_7285_firmwarev < 1.4.11.4.1
dell latitude_7290_firmwarev < 1.10.01.10.0
dell latitude_7300_firmwarev < 1.3.111.3.11
dell latitude_7370_firmwarev < 1.18.51.18.5
dell latitude_7380_firmwarev < 1.15.11.15.1
dell latitude_7389_firmwarev < 1.18.11.18.1
dell latitude_7390_firmwarev < 1.10.01.10.0
dell latitude_7400_firmwarev < 1.3.111.3.11
dell latitude_7414_firmwarev < 1.24.01.24.0
dell latitude_7424_rugged_extreme_firmwarev < 1.5.01.5.0
dell latitude_7480_firmwarev < 1.15.11.15.1
dell latitude_7490_firmwarev < 1.10.01.10.0
dell latitude_e5270_firmwarev < 1.21.41.21.4
dell latitude_e5470_firmwarev < 1.21.41.21.4
dell latitude_e5570_firmwarev < 1.21.41.21.4
dell latitude_e7270_firmwarev < 1.22.81.22.8
dell latitude_e7470_firmwarev < 1.22.81.22.8
dell optiplex_3040_firmwarev < 1.11.31.11.3
dell optiplex_3046_firmwarev < 1.8.21.8.2
dell optiplex_3050_firmwarev < 1.12.11.12.1
dell optiplex_3060_firmwarev < 1.4.21.4.2
dell optiplex_3070_firmwarev < 1.0.31.0.3
dell optiplex_3240_firmwarev < 1.8.11.8.1
dell optiplex_5040_firmwarev < 1.14.51.14.5
dell optiplex_5050_firmwarev < 1.12.11.12.1
dell optiplex_5060_firmwarev < 1.4.21.4.2
dell optiplex_5070_firmwarev < 1.0.31.0.3
dell optiplex_5250_firmwarev < 1.13.11.13.1
dell optiplex_5260_firmwarev < 1.7.31.7.3
dell optiplex_7040_firmwarev < 1.15.51.15.5
dell optiplex_7050_firmwarev < 1.12.11.12.1
dell optiplex_7060_firmwarev < 1.4.21.4.2
dell optiplex_7070_firmwarev < 1.0.31.0.3
dell optiplex_7440_firmwarev < 1.11.11.11.1
dell optiplex_7450_firmwarev < 1.13.11.13.1
dell optiplex_7460_firmwarev < 1.7.31.7.3
dell optiplex_7760_firmwarev < 1.7.31.7.3
dell optiplex_5270_firmwarev < 1.1.11.1.1
dell optiplex_7470_firmwarev < 1.1.11.1.1
dell optiplex_7770_firmwarev < 1.1.11.1.1
dell optiplex_xe3_firmwarev < 1.4.21.4.2
dell precision_3420_firmwarev < 2.13.12.13.1
dell precision_3430_firmwarev < 1.4.21.4.2
dell precision_3510_firmwarev < 1.21.41.21.4
dell precision_3520_firmwarev < 1.15.11.15.1
dell precision_3530_firmwarev < 1.8.11.8.1
dell precision_3540_firmwarev < 1.3.111.3.11
dell precision_3541_firmwarev < 1.2.111.2.11
dell precision_3620_firmwarev < 2.13.12.13.1
dell precision_3630_firmwarev < 1.2.01.2.0
dell precision_3930_firmwarev < 2.2.02.2.0
dell precision_5510_firmwarev < 1.12.01.12.0
dell precision_5520_firmwarev < 1.15.01.15.0
dell precision_5530_firmwarev < 1.11.21.11.2
dell precision_5720_firmwarev < 2.5.12.5.1
dell precision_5810_firmwarev < a31a31
dell precision_5820_firmwarev < 1.11.11.11.1
dell precision_7510_firmwarev < 1.18.51.18.5
dell precision_7520_firmwarev < 1.15.11.15.1
dell precision_7530_firmwarev < 1.9.01.9.0
dell precision_7540_firmwarev < 1.1.31.1.3
dell precision_7710_firmwarev < 1.18.51.18.5
dell precision_7720_firmwarev < 1.15.11.15.1
dell precision_7730_firmwarev < 1.9.01.9.0
dell precision_7740_firmwarev < 1.1.31.1.3
dell precision_7810_firmwarev < a31a31
dell precision_7820_firmwarev < 2.0.52.0.5
dell precision_7910_firmwarev ≤ a31—
dell precision_7920_firmwarev < 2.0.52.0.5
dell precision_3431_firmwarev < 1.0.31.0.3
dell vostro_7580_firmwarev < 1.11.11.11.1
dell vostro_15_7570_firmwarev < 1.8.01.8.0
dell vostro_3070_firmwarev < 2.13.02.13.0
dell vostro_3470_firmwarev < 2.13.02.13.0
dell vostro_3480_firmwarev < 1.5.11.5.1
dell vostro_3481_firmwarev < 1.4.01.4.0
dell vostro_3580_firmwarev < 1.5.11.5.1
dell vostro_3581_firmwarev < 1.4.01.4.0
dell vostro_3583_firmwarev < 1.5.11.5.1
dell vostro_3584_firmwarev < 1.4.01.4.0
dell vostro_3670_firmwarev < 2.13.02.13.0
dell vostro_5370_firmwarev < 1.12.01.12.0
dell vostro_5471_firmwarev < 1.12.01.12.0
dell vostro_5481_firmwarev < 2.4.02.4.0
dell vostro_5581_firmwarev < 2.4.02.4.0
dell vostro_7590_firmwarev < 1.1.11.1.1
dell wyse_5070_firmwarev < 1.2.41.2.4
dell wyse_7040_firmwarev < 1.6.01.6.0
dell xps_12_9250_firmwarev < 1.6.11.6.1
dell xps_13_9343_firmwarev < a20a20
dell xps_13_9350_firmwarev < 1.11.11.11.1
dell xps_13_9360_firmwarev < 2.12.02.12.0
dell xps_13_9380_firmwarev < 1.4.01.4.0
dell xps_15_9550_firmwarev < 1.12.01.12.0
dell xps_15_9560_firmwarev < 1.15.01.15.0
dell xps_15_9575_firmwarev < 1.6.11.6.1
dell xps_15_9570_firmwarev < 1.11.21.11.2
dell xps_27_7760_firmwarev < 2.5.12.5.1
dell xps_8900_firmwarev < 2.6.12.6.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-5326 · Dell Chengming 3980 Firmware · Dark Radar