Vulnerabilities > CVE-2020-5376 - Use After Free vulnerability in Dell Inspiron 7347 Bios

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
dell
CWE-416

Summary

Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).

Vulnerable Configurations

Part Description Count
OS
Dell
1
Hardware
Dell
1

Common Weakness Enumeration (CWE)