CVE-2020-5324 : Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrit

Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.

Published 2020-02-21 15:15:12

Updated 2021-09-14 12:41:26

Source Dell

View at NVD, CVE.org

Products affected by CVE-2020-5324

Dell » Inspiron 7580 Firmware
Versions before (<) 1.10.0
cpe:2.3:o:dell:inspiron_7580_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7580 » Version: N/A
Dell » G3 3579 Firmware
Versions before (<) 1.11.0
cpe:2.3:o:dell:g3_3579_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G3 3579 » Version: N/A
Dell » G3 3779 Firmware
Versions before (<) 1.11.0
cpe:2.3:o:dell:g3_3779_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G3 3779 » Version: N/A
Dell » G5 5587 Firmware
Versions before (<) 1.12.2
cpe:2.3:o:dell:g5_5587_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G5 5587 » Version: N/A
Dell » G7 7588 Firmware
Versions before (<) 1.12.2
cpe:2.3:o:dell:g7_7588_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G7 7588 » Version: N/A
Dell » Inspiron 3480 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:inspiron_3480_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3480 » Version: N/A
Dell » Inspiron 3481 Firmware
Versions before (<) 1.6.0
cpe:2.3:o:dell:inspiron_3481_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3481 » Version: N/A
Dell » Inspiron 3580 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:inspiron_3580_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3580 » Version: N/A
Dell » Inspiron 3583 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:inspiron_3583_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3583 » Version: N/A
Dell » Inspiron 3581 Firmware
Versions before (<) 1.6.0
cpe:2.3:o:dell:inspiron_3581_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3581 » Version: N/A
Dell » Inspiron 3584 Firmware
Versions before (<) 1.6.0
cpe:2.3:o:dell:inspiron_3584_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3584 » Version: N/A
Dell » Inspiron 3780 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:inspiron_3780_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3780 » Version: N/A
Dell » Inspiron 3781 Firmware
Versions before (<) 1.6.0
cpe:2.3:o:dell:inspiron_3781_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3781 » Version: N/A
Dell » Inspiron 5480 Firmware
Versions before (<) 2.6.1
cpe:2.3:o:dell:inspiron_5480_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5480 » Version: N/A
Dell » Inspiron 5481 Firmware
Versions before (<) 2.6.1
cpe:2.3:o:dell:inspiron_5481_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5481 » Version: N/A
Dell » Inspiron 5482 Firmware
Versions up to, including, (<=) 2.6.1
cpe:2.3:o:dell:inspiron_5482_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5482 » Version: N/A
Dell » Inspiron 5580 Firmware
Versions before (<) 2.6.1
cpe:2.3:o:dell:inspiron_5580_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5580 » Version: N/A
Dell » Inspiron 5582 Firmware
Versions before (<) 2.6.1
cpe:2.3:o:dell:inspiron_5582_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5582 » Version: N/A
Dell » Inspiron 7380 Firmware
Versions before (<) 1.10.0
cpe:2.3:o:dell:inspiron_7380_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7380 » Version: N/A
Dell » Inspiron 7386 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:inspiron_7386_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7386 » Version: N/A
Dell » Inspiron 7586 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:inspiron_7586_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7586 » Version: N/A
Dell » Inspiron 7786 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:inspiron_7786_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7786 » Version: N/A
Dell » Latitude 3390 Firmware
Versions before (<) 1.12.0
cpe:2.3:o:dell:latitude_3390_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3390 » Version: N/A
Dell » Latitude 3490 Firmware
Versions before (<) 1.11.0
cpe:2.3:o:dell:latitude_3490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3490 » Version: N/A
Dell » Latitude 3590 Firmware
Versions before (<) 1.11.0
cpe:2.3:o:dell:latitude_3590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3590 » Version: N/A
Dell » Latitude 5290 Firmware
Versions before (<) 1.12.1
cpe:2.3:o:dell:latitude_5290_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5290 » Version: N/A
Dell » Latitude 5490 Firmware
Versions before (<) 1.12.1
cpe:2.3:o:dell:latitude_5490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5490 » Version: N/A
Dell » Latitude 5491 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:latitude_5491_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5491 » Version: N/A
Dell » Latitude 5590 Firmware
Versions before (<) 1.12.1
cpe:2.3:o:dell:latitude_5590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5590 » Version: N/A
Dell » Latitude 5591 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:latitude_5591_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5591 » Version: N/A
Dell » Latitude 7290 Firmware
Versions before (<) 1.13.1
cpe:2.3:o:dell:latitude_7290_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7290 » Version: N/A
Dell » Latitude 7390 Firmware
Versions before (<) 1.13.1
cpe:2.3:o:dell:latitude_7390_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7390 » Version: N/A
Dell » Latitude 7424 Rugged Extreme Firmware
Versions before (<) 1.8.5
cpe:2.3:o:dell:latitude_7424_rugged_extreme_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7424 Rugged Extreme » Version: N/A
Dell » Latitude 7490 Firmware
Versions before (<) 1.13.1
cpe:2.3:o:dell:latitude_7490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7490 » Version: N/A
Dell » Precision 3530 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:precision_3530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3530 » Version: N/A
Dell » Precision 5530 Firmware
Versions before (<) 1.14.0
cpe:2.3:o:dell:precision_5530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 5530 » Version: N/A
Dell » Precision 7530 Firmware
Versions before (<) 1.12.1
cpe:2.3:o:dell:precision_7530_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 7530 » Version: N/A
Dell » Vostro 3480 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:vostro_3480_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3480 » Version: N/A
Dell » Vostro 3580 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:vostro_3580_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3580 » Version: N/A
Dell » Vostro 3581 Firmware
Versions before (<) 1.6.0
cpe:2.3:o:dell:vostro_3581_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3581 » Version: N/A
Dell » Vostro 3584 Firmware
Versions before (<) 1.6.0
cpe:2.3:o:dell:vostro_3584_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3584 » Version: N/A
Dell » Vostro 3583 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:vostro_3583_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3583 » Version: N/A
Dell » Vostro 5481 Firmware
Versions before (<) 2.6.1
cpe:2.3:o:dell:vostro_5481_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5481 » Version: N/A
Dell » Vostro 5581 Firmware
Versions before (<) 2.6.1
cpe:2.3:o:dell:vostro_5581_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5581 » Version: N/A
Dell » Inspiron 7590 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:inspiron_7590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7590 » Version: N/A
Dell » Inspiron 7591 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:inspiron_7591_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7591 » Version: N/A
Dell » Latitude 3300 Firmware
Versions before (<) 1.7.2
cpe:2.3:o:dell:latitude_3300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3300 » Version: N/A
Dell » Latitude 5300 Firmware
Versions before (<) 1.7.2
cpe:2.3:o:dell:latitude_5300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5300 » Version: N/A
Dell » Latitude 5400 Firmware
Versions before (<) 1.6.3
cpe:2.3:o:dell:latitude_5400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5400 » Version: N/A
Dell » Latitude 5401 Firmware
Versions before (<) 1.6.1
cpe:2.3:o:dell:latitude_5401_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5401 » Version: N/A
Dell » Latitude 5420 Rugged Firmware
Versions before (<) 1.8.5
cpe:2.3:o:dell:latitude_5420_rugged_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5420 Rugged » Version: N/A
Dell » Latitude 5424 Rugged Firmware
Versions before (<) 1.8.5
cpe:2.3:o:dell:latitude_5424_rugged_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5424 Rugged » Version: N/A
Dell » Latitude 5500 Firmware
Versions before (<) 1.6.3
cpe:2.3:o:dell:latitude_5500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5500 » Version: N/A
Dell » Latitude 5501 Firmware
Versions before (<) 1.6.1
cpe:2.3:o:dell:latitude_5501_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 5501 » Version: N/A
Dell » Latitude 7300 Firmware
Versions before (<) 1.6.1
cpe:2.3:o:dell:latitude_7300_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7300 » Version: N/A
Dell » Latitude 7400 Firmware
Versions before (<) 1.6.1
cpe:2.3:o:dell:latitude_7400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7400 » Version: N/A
Dell » Precision 3540 Firmware
Versions before (<) 1.6.3
cpe:2.3:o:dell:precision_3540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3540 » Version: N/A
Dell » Precision 3541 Firmware
Versions before (<) 1.6.1
cpe:2.3:o:dell:precision_3541_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 3541 » Version: N/A
Dell » Precision 7540 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:precision_7540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 7540 » Version: N/A
Dell » Precision 7730 Firmware
Versions before (<) 1.12.1
cpe:2.3:o:dell:precision_7730_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 7730 » Version: N/A
Dell » Precision 7740 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:precision_7740_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 7740 » Version: N/A
Dell » Vostro 3481 Firmware
Versions before (<) 1.6.0
cpe:2.3:o:dell:vostro_3481_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3481 » Version: N/A
Dell » Vostro 7590 Firmware
Versions before (<) 1.5.1
cpe:2.3:o:dell:vostro_7590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 7590 » Version: N/A
Dell » Xps 13 9380 Firmware
Versions before (<) 1.9.1
cpe:2.3:o:dell:xps_13_9380_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 13 9380 » Version: N/A
Dell » Xps 15 9575 Firmware
Versions before (<) 1.10.0
cpe:2.3:o:dell:xps_15_9575_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 15 9575 » Version: N/A
Dell » Xps 15 9570 Firmware
Versions before (<) 1.14.0
cpe:2.3:o:dell:xps_15_9570_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 15 9570 » Version: N/A
Dell » G3 15 3590 Firmware
Versions before (<) 1.9.2
cpe:2.3:o:dell:g3_15_3590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G3 15 3590 » Version: N/A
Dell » G5 15 5590 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:g5_15_5590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G5 15 5590 » Version: N/A
Dell » G5 5090 Firmware
Versions before (<) 1.1.2
cpe:2.3:o:dell:g5_5090_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G5 5090 » Version: N/A
Dell » G7 15 7590 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:g7_15_7590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G7 15 7590 » Version: N/A
Dell » G7 17 7790 Firmware
Versions before (<) 1.11.1
cpe:2.3:o:dell:g7_17_7790_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » G7 17 7790 » Version: N/A
Dell » Inspiron 14 5490 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_14_5490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 14 5490 » Version: N/A
Dell » Inspiron 3490 Firmware
Versions before (<) 1.5.0
cpe:2.3:o:dell:inspiron_3490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3490 » Version: N/A
Dell » Inspiron 3493 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_3493_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3493 » Version: N/A
Dell » Inspiron 3590 Firmware
Versions before (<) 1.5.0
cpe:2.3:o:dell:inspiron_3590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3590 » Version: N/A
Dell » Inspiron 3593 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_3593_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3593 » Version: N/A
Dell » Inspiron 3790 Firmware
Versions before (<) 1.5.0
cpe:2.3:o:dell:inspiron_3790_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3790 » Version: N/A
Dell » Inspiron 3793 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_3793_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 3793 » Version: N/A
Dell » Inspiron 5390 Firmware
Versions before (<) 1.7.1
cpe:2.3:o:dell:inspiron_5390_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5390 » Version: N/A
Dell » Inspiron 5391 Firmware
Versions before (<) 1.3.0
cpe:2.3:o:dell:inspiron_5391_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5391 » Version: N/A
Dell » Inspiron 5491 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_5491_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5491 » Version: N/A
Dell » Inspiron 5493 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_5493_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5493 » Version: N/A
Dell » Inspiron 5494 Firmware
Versions before (<) 1.5.0
cpe:2.3:o:dell:inspiron_5494_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5494 » Version: N/A
Dell » Inspiron 5498 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_5498_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5498 » Version: N/A
Dell » Inspiron 5583 Firmware
Versions before (<) 1.9.1
cpe:2.3:o:dell:inspiron_5583_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5583 » Version: N/A
Dell » Inspiron 5584 Firmware
Versions before (<) 1.9.1
cpe:2.3:o:dell:inspiron_5584_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5584 » Version: N/A
Dell » Inspiron 5590 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_5590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5590 » Version: N/A
Dell » Inspiron 5591 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_5591_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5591 » Version: N/A
Dell » Inspiron 5593 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_5593_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5593 » Version: N/A
Dell » Inspiron 5594 Firmware
Versions before (<) 1.5.0
cpe:2.3:o:dell:inspiron_5594_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5594 » Version: N/A
Dell » Inspiron 5598 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:inspiron_5598_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 5598 » Version: N/A
Dell » Inspiron 7390 Firmware
Versions before (<) 1.7.1
cpe:2.3:o:dell:inspiron_7390_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7390 » Version: N/A
Dell » Inspiron 7391 Firmware
Versions before (<) 1.3.0
cpe:2.3:o:dell:inspiron_7391_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7391 » Version: N/A
Dell » Inspiron 7490 Firmware
Versions before (<) 1.2.1
cpe:2.3:o:dell:inspiron_7490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7490 » Version: N/A
Dell » Inspiron 7791 Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:inspiron_7791_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Inspiron 7791 » Version: N/A
Dell » Latitude 3301 Firmware
Versions before (<) 1.7.0
cpe:2.3:o:dell:latitude_3301_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3301 » Version: N/A
Dell » Latitude 3311 Firmware
Versions before (<) 1.3.0
cpe:2.3:o:dell:latitude_3311_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3311 » Version: N/A
Dell » Latitude 3400 Firmware
Versions before (<) 1.9.2
cpe:2.3:o:dell:latitude_3400_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3400 » Version: N/A
Dell » Latitude 3500 Firmware
Versions before (<) 1.9.2
cpe:2.3:o:dell:latitude_3500_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 3500 » Version: N/A
Dell » Latitude 7200 Firmware
Versions before (<) 1.6.2
cpe:2.3:o:dell:latitude_7200_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7200 » Version: N/A
Dell » Latitude 7220 Rugged Extreme Tablet Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:latitude_7220_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7220 Rugged Extreme Tablet » Version: N/A
Dell » Latitude 7220ex Rugged Extreme Tablet Firmware
Versions before (<) 1.3.1
cpe:2.3:o:dell:latitude_7220ex_rugged_extreme_tablet_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Latitude 7220ex Rugged Extreme Tablet » Version: N/A
Dell » Precision 5540 Firmware
Versions before (<) 1.6.3
cpe:2.3:o:dell:precision_5540_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Precision 5540 » Version: N/A
Dell » Vostro 15 7580 Firmware
Versions before (<) 1.12.2
cpe:2.3:o:dell:vostro_15_7580_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 15 7580 » Version: N/A
Dell » Vostro 3490 Firmware
Versions before (<) 1.5.0
cpe:2.3:o:dell:vostro_3490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3490 » Version: N/A
Dell » Vostro 3590 Firmware
Versions before (<) 1.5.0
cpe:2.3:o:dell:vostro_3590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 3590 » Version: N/A
Dell » Vostro 5390 Firmware
Versions before (<) 1.7.1
cpe:2.3:o:dell:vostro_5390_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5390 » Version: N/A
Dell » Vostro 5391 Firmware
Versions before (<) 1.3.0
cpe:2.3:o:dell:vostro_5391_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5391 » Version: N/A
Dell » Vostro 5490 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:vostro_5490_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5490 » Version: N/A
Dell » Vostro 5590 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:vostro_5590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Vostro 5590 » Version: N/A
Dell » Wyse 5070 Thin Client Firmware
Versions before (<) 1.4.2
cpe:2.3:o:dell:wyse_5070_thin_client_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Wyse 5070 Thin Client » Version: N/A
Dell » Wyse 5470 Firmware
Versions before (<) 1.2.1
cpe:2.3:o:dell:wyse_5470_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Wyse 5470 » Version: N/A
Dell » Xps 15 7590 Firmware
Versions before (<) 1.4.0
cpe:2.3:o:dell:xps_15_7590_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Dell » Xps 15 7590 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2020-5324

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 11 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-5324

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.6	LOW	AV:L/AC:H/Au:N/C:N/I:P/A:P	1.9	4.9	NIST
Access Vector: Local Access Complexity: High Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: Partial
4.4	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N	0.8	3.6	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: High Availability: None
7.1	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H	1.8	5.2	Dell
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: High Availability: High

CWE ids for CVE-2020-5324

CWE-59 Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Assigned by: nvd@nist.gov (Primary)
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

Assigned by: security_alert@emc.com (Secondary)

References for CVE-2020-5324

https://www.dell.com/support/article/SLN320348

Access Denied
Vendor Advisory

Jump to

Vulnerability Details : CVE-2020-5324

Products affected by CVE-2020-5324

Exploit prediction scoring system (EPSS) score for CVE-2020-5324

CVSS scores for CVE-2020-5324

CWE ids for CVE-2020-5324

References for CVE-2020-5324