CVE-2020-5343: Dell OS Recovery Image For Microsoft Windows 10

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissions vulnerability. A local authenticated malicious user with low privileges could exploit this vulnerability to gain unauthorized access on the root folder.

Affected products

• Dell OS Recovery Image For Microsoft Windows 10: before 2019-12-20 (fixed in 2019-12-20)

Published 2020-05-04. Last modified 2026-06-17.