CVE-2020-5387 LOW

CVE-2020-5387

Vendor Dell

Product CPG BIOS

Weakness CWE-755

Published October 1, 2020

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

2.3/10

Attack vector Local

Attack complexity Low

Privileges required High

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this vulnerability to prevent the system from booting until the exploited boot device is removed.

Key dates

02Disclosure timeline

October 1, 2020 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-5387 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/755.html

Related vulnerabilities

04Related CVE

CVE-2020-1681 Junos OS Evolved: Receipt of a specifically malformed NDP packet could lead to Denial of Service CVE-2023-44186 Junos OS and Junos OS Evolved: RPD crash when attempting to send a very long AS PATH to a non-4-byte-AS capable BGP neighbor CVE-2024-34750 Apache Tomcat: HTTP/2 excess header handling DoS CVE-2023-27595 Cilium eBPF filters may be temporarily removed during agent restart CVE-2021-23886 Local Denial of Service in McAfee DLP Endpoint for Windows