Vulnerabilities > CVE-2020-5376 - Use After Free vulnerability in Dell Inspiron 7347 Bios

047910
CVSS 6.8 - MEDIUM
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
low complexity
dell
CWE-416

Summary

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).

Vulnerable Configurations

Part Description Count
OS
Dell
1
Hardware
Dell
1

Common Weakness Enumeration (CWE)