CVE-2020-26186 MEDIUM

CVE-2020-26186

Vendor Dell
Product CPG BIOS
Weakness CWE-642
Published January 8, 2021
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode (SMM).

Key dates

02Disclosure timeline

January 8, 2021 CVE published
September 17, 2024 Record updated