Vulnerabilities > CVE-2020-5378 - Use After Free vulnerability in Dell G7 17 7790 Bios

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
dell
CWE-416

Summary

Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM).

Vulnerable Configurations

Part Description Count
OS
Dell
1
Hardware
Dell
1

Common Weakness Enumeration (CWE)