CVE-2020-5362: Dell Chengming 3967 Firmware
Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days.
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.
Affected products
- Dell Chengming 3967 Firmware: before 1.9.0 (fixed in 1.9.0)
- Dell Chengming 3977 Firmware: before 1.9.0 (fixed in 1.9.0)
- Dell Chengming 3980 Firmware: before 2.16.0 (fixed in 2.16.0)
- Dell Chengming 3988 Firmware: before 1.3.0 (fixed in 1.3.0)
- Dell Chengming 3990 Firmware: before 1.1.3 (fixed in 1.1.3)
- Dell Chengming 3991 Firmware: before 1.1.3 (fixed in 1.1.3)
- Dell Embedded Box Pc 5000 Firmware: before 1.8.0 (fixed in 1.8.0)
- Dell g3 15 3500 Firmware: before 1.2.1 (fixed in 1.2.1)
- Dell g3 15 3590 Firmware: before 1.11.0 (fixed in 1.11.0)
- Dell g3 3579 Firmware: before 1.13.0 (fixed in 1.13.0)
- Dell g3 3779 Firmware: before 1.13.0 (fixed in 1.13.0)
- Dell g5 15 5500 Firmware: before 1.2.1 (fixed in 1.2.1)
- Dell g5 15 5590 Firmware: before 1.13.2 (fixed in 1.13.2)
- Dell g5 5090 Firmware: before 1.3.0 (fixed in 1.3.0)
- Dell g5 5587 Firmware: before 1.14.0 (fixed in 1.14.0)
- Dell g7 15 7590 Firmware: before 1.13.2 (fixed in 1.13.2)
- Dell g7 17 7790 Firmware: before 1.13.2 (fixed in 1.13.2)
- Dell g7 7588 Firmware: before 1.14.0 (fixed in 1.14.0)
- Dell Inspiron 11 2-In-1 3153 Firmware: before 1.25.0 (fixed in 1.25.0)
- Dell Inspiron 11 2-In-1 3158 Firmware: before 1.25.0 (fixed in 1.25.0)
- Dell Inspiron 13 2-In-1 5368 Firmware: before 1.22.0 (fixed in 1.22.0)
- Dell Inspiron 13 2-In-1 5378 Firmware: before 1.30.0 (fixed in 1.30.0)
- Dell Inspiron 13 2-In-1 5379 Firmware: before 1.14.0 (fixed in 1.14.0)
- Dell Inspiron 13 2-In-1 7353 Firmware: before 1.25.0 (fixed in 1.25.0)
- Dell Inspiron 13 2-In-1 7359 Firmware: before 1.25.0 (fixed in 1.25.0)
- and 329 more
Published 2020-06-10. Last modified 2026-06-17.