2 lines
3.6 KiB
JSON
2 lines
3.6 KiB
JSON
{"affected":[{"affectedData":[{"product":"CPG BIOS","vendor":"Dell","versions":[{"lessThan":"1.31.0","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security_alert@emc.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:dell:inspiron_15_7579_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"34B3B464-C586-4F0E-AC78-B449C4E1DCBD","versionEndExcluding":"1.31.0","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:dell:inspiron_15_7579:-:*:*:*:*:*:*:*","matchCriteriaId":"F1E5CCCB-8F4F-443F-9989-218FEC6BD989","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM."},{"lang":"es","value":"Dell Inspiron 15 7579 2-en-1 BIOS versiones anteriores a 1.31.0, contienen una vulnerabilidad de verificación de búfer de comunicación SMM Inapropiada. Un usuario malicioso autenticado local podría potencialmente explotar esta vulnerabilidad mediante el uso de una SMI para obtener una ejecución de código arbitraria en SMRAM"}],"id":"CVE-2020-5388","lastModified":"2026-06-17T03:21:23.710","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"MEDIUM","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.4,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:M/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":3.4,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.3,"impactScore":6.0,"source":"security_alert@emc.com","type":"Secondary"},{"cvssData":{"attackComplexity":"HIGH","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.3,"impactScore":6.0,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2020-11-10T15:15:12.657","references":[{"source":"security_alert@emc.com","tags":["Vendor Advisory"],"url":"https://www.dell.com/support/article/en-us/sln322869/dsa-2020-215-dell-inspiron-15-7579-2-in-1-improper-smm-communication-buffer-boundary-verification-vulnerability"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.dell.com/support/article/en-us/sln322869/dsa-2020-215-dell-inspiron-15-7579-2-in-1-improper-smm-communication-buffer-boundary-verification-vulnerability"}],"sourceIdentifier":"security_alert@emc.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-119"}],"source":"security_alert@emc.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-119"}],"source":"nvd@nist.gov","type":"Primary"}]}
|