Chengming 3967 Firmware
CVE-2020-5362
MEDIUM
Improper Authorization (CWE-285)
2020-06-10
security_alert@emc.com
Dell
Authentication Bypass
Chengming 3967 Firmware
Chengming 3977 Firmware
Chengming 3980 Firmware
Chengming 3988 Firmware
Chengming 3990 Firmware
Chengming 3991 Firmware
G3 15 3500 Firmware
G3 15 3590 Firmware
G3 3579 Firmware
G3 3779 Firmware
G5 15 5500 Firmware
G5 15 5590 Firmware
G5 5587 Firmware
G7 15 7590 Firmware
G7 17 7790 Firmware
G7 7588 Firmware
Embedded Box Pc 5000 Firmware
G5 5090 Firmware
Inspiron 11 2 In 1 3153 Firmware
Inspiron 11 2 In 1 3158 Firmware
Inspiron 13 7370 Firmware
Inspiron 13 2 In 1 5368 Firmware
Inspiron 13 2 In 1 5378 Firmware
Inspiron 13 2 In 1 5379 Firmware
Inspiron 13 2 In 1 7353 Firmware
Inspiron 13 2 In 1 7359 Firmware
Inspiron 13 2 In 1 7368 Firmware
Inspiron 13 2 In 1 7373 Firmware
Inspiron 13 2 In 1 7378 Firmware
Inspiron 14 3458 Firmware
Inspiron 14 3459 Firmware
Inspiron 14 3467 Firmware
Inspiron 14 3468 Firmware
Inspiron 14 3473 Firmware
Inspiron 14 5468 Firmware
Inspiron 14 5490 Firmware
Inspiron 14 7460 Firmware
Inspiron 14 Gaming 7466 Firmware
Inspiron 14 Gaming 7467 Firmware
Inspiron 15 3559 Firmware
Inspiron 15 3567 Firmware
Inspiron 15 3568 Firmware
Inspiron 15 5566 Firmware
Inspiron 15 5567 Firmware
Inspiron 15 7560 Firmware
Inspiron 15 7570 Firmware
Inspiron 15 7572 Firmware
Inspiron 15 2 In 1 5568 Firmware
Inspiron 15 2 In 1 5578 Firmware
Inspiron 15 2 In 1 5579 Firmware
Inspiron 15 2 In 1 7568 Firmware
Inspiron 15 2 In 1 7569 Firmware
Inspiron 15 2 In 1 7573 Firmware
Inspiron 15 2 In 1 7579 Firmware
Inspiron 15 Gaming 7566 Firmware
Inspiron 15 Gaming 7567 Firmware
Inspiron 15 Gaming 7577 Firmware
Inspiron 15 3552 Firmware
Inspiron 17 5767 Firmware
Inspiron 17 2 In 1 7773 Firmware
Inspiron 17 2 In 1 7778 Firmware
Inspiron 17 2 In 1 7779 Firmware
Inspiron 3268 Firmware
Inspiron 3470 Firmware
Inspiron 3471 Firmware
Inspiron 3476 Firmware
Inspiron 3480 Firmware
Inspiron 3481 Firmware
Inspiron 3490 Firmware
Inspiron 3493 Firmware
Inspiron 3576 Firmware
Inspiron 3580 Firmware
Inspiron 3581 Firmware
Inspiron 3583 Firmware
Inspiron 3584 Firmware
Inspiron 3590 Firmware
Inspiron 3593 Firmware
Inspiron 3668 Firmware
Inspiron 3670 Firmware
Inspiron 3671 Firmware
Inspiron 3780 Firmware
Inspiron 3781 Firmware
Inspiron 3790 Firmware
Inspiron 3793 Firmware
Inspiron 3880 Firmware
Inspiron 3881 Firmware
Inspiron 5300 Firmware
Inspiron 5370 Firmware
Inspiron 5390 Firmware
Inspiron 5391 Firmware
Inspiron 5400 2 In1 Firmware
Inspiron 5457 Firmware
Inspiron 5459 Firmware
Inspiron 5480 Firmware
Inspiron 5481 Firmware
Inspiron 5482 Firmware
Inspiron 5491 2 In 1 Firmware
Inspiron 5493 Firmware
Inspiron 5494 Firmware
Inspiron 5498 Firmware
Inspiron 5557 Firmware
Inspiron 5559 Firmware
Inspiron 5570 Firmware
Inspiron 5580 Firmware
Inspiron 5582 Firmware
Inspiron 5583 Firmware
Inspiron 5584 Firmware
Inspiron 5590 Firmware
Inspiron 5591 2 In 1 Firmware
Inspiron 5593 Firmware
Inspiron 5594 Firmware
Inspiron 5598 Firmware
Inspiron 5759 Firmware
Inspiron 5770 Firmware
Inspiron 7300 2 In 1 Firmware
Inspiron 7380 Firmware
Inspiron 7386 Firmware
Inspiron 7390 2 In 1 Firmware
Inspiron 7391 Firmware
Inspiron 7391 2 In 1 Firmware
Inspiron 7472 Firmware
Inspiron 7490 Firmware
Inspiron 7500 Firmware
Inspiron 7500 2 In 1 Firmware
Inspiron 7501 Firmware
Inspiron 7580 Firmware
Inspiron 7586 Firmware
Inspiron 7590 Firmware
Inspiron 7590 2 In 1 Firmware
Inspiron 7591 Firmware
Inspiron 7591 2 In 1 Firmware
Inspiron 7786 Firmware
Inspiron 5490 Aio Firmware
Inspiron 7790 Aio Firmware
Insprion 5491 Aio Firmware
Latitude 3180 Firmware
Latitude 3189 Firmware
Latitude 3190 Firmware
Latitude 3190 2 In 1 Firmware
Latitude 3300 Firmware
Latitude 3301 Firmware
Latitude 3310 Firmware
Latitude 3310 2 In 1 Firmware
Latitude 3350 Firmware
Latitude 3379 Firmware
Latitude 3380 Firmware
Latitude 3390 2 In 1 Firmware
Latitude 3400 Firmware
Latitude 3410 Firmware
Latitude 3460 Firmware
Latitude 3460 Mobile Thin Client Firmware
Latitude 3470 Firmware
Latitude 3480 Firmware
Latitude 3480 Mobile Thin Client Firmware
Latitude 3490 Firmware
Latitude 3500 Firmware
Latitude 3510 Firmware
Latitude 3560 Firmware
Latitude 3570 Firmware
Latitude 3580 Firmware
Latitude 3590 Firmware
Latitude 5175 Firmware
Latitude 5179 Firmware
Latitude 5250 Firmware
Latitude 5280 Firmware
Latitude 5280 Mobile Thin Client Firmware
Latitude 5285 Firmware
Latitude 5288 Firmware
Latitude 5289 Firmware
Latitude 5290 Firmware
Latitude 5290 2 In 1 Firmware
Latitude 5300 2 In 1 Firmware
Latitude 5310 Firmware
Latitude 5310 2 In 1 Firmware
Latitude 5410 Firmware
Latitude 5411 Firmware
Latitude 5414 Rugged Firmware
Latitude 5420 Rugged Firmware
Latitude 5424 Rugged Firmware
Latitude 5450 Firmware
Latitude 5480 Firmware
Latitude 5488 Firmware
Latitude 5490 Firmware
Latitude 5491 Firmware
Latitude 5510 Firmware
Latitude 5511 Firmware
Latitude 5550 Firmware
Latitude 5580 Firmware
Latitude 5590 Firmware
Latitude 5591 Firmware
Latitude 7210 2 In 1 Firmware
Latitude 7212 Rugged Extreme Tablet Firmware
Latitude 7214 Rugged Extreme Firmware
Latitude 7250 Firmware
Latitude 7275 Firmware
Latitude 7280 Firmware
Latitude 7285 Firmware
Latitude 7290 Firmware
Latitude 7310 Firmware
Latitude 7350 Firmware
Latitude 7370 Firmware
Latitude 7380 Firmware
Latitude 7389 Firmware
Latitude 7390 Firmware
Latitude 7390 2 In 1 Firmware
Latitude 7410 Firmware
Latitude 7414 Rugged Firmware
Latitude 7424 Rugged Extreme Firmware
Latitude 7480 Firmware
Latitude 7490 Firmware
Latitude 9410 Firmware
Latitude 9510 Firmware
Latitude E5250 Firmware
Latitude E5270 Firmware
Latitude E5450 Firmware
Latitude E5470 Firmware
Latitude E5550 Firmware
Latitude E5570 Firmware
Latitude E7250 Firmware
Latitude E7270 Firmware
Latitude E7270 Mobile Thin Client Firmware
Latitude E7450 Firmware
Latitude E7470 Firmware
Optiplex 3040 Firmware
Optiplex 3046 Firmware
Optiplex 3050 Firmware
Optiplex 3050 Aio Firmware
Optiplex 3060 Firmware
Optiplex 3070 Firmware
Optiplex 3240 Aio Firmware
Optiplex 3280 Aio Firmware
Optiplex 5040 Firmware
Optiplex 5050 Firmware
Optiplex 5060 Firmware
Optiplex 5070 Firmware
Optiplex 5080 Firmware
Optiplex 5250 Firmware
Optiplex 5260 Aio Firmware
Optiplex 5270 Aio Firmware
Optiplex 5480 Aio Firmware
Optiplex 7040 Firmware
Optiplex 7050 Firmware
Optiplex 7060 Firmware
Optiplex 7070 Firmware
Optiplex 7071 Tower Firmware
Optiplex 7080 Firmware
Optiplex 7440 Aio Firmware
Optiplex 7450 Firmware
Optiplex 7460 Aio Firmware
Optiplex 7480 Aio Firmware
Optiplex 7760 Aio Firmware
Optiplex 7780 Aio Firmware
Optiplex Aio 7470 Firmware
Optiplex Aio 7770 Firmware
Optiplex Xe3 Firmware
Precision 3420 Tower Firmware
Precision 3430 Firmware
Precision 3440 Firmware
Precision 3510 Firmware
Precision 3520 Firmware
Precision 3530 Firmware
Precision 3541 Firmware
Precision 3550 Firmware
Precision 3551 Firmware
Precision 3620 Tower Firmware
Precision 3630 Tower Firmware
Precision 3640 Tower Firmware
Precision 3930 Rack Firmware
Precision 5510 Firmware
Precision 5520 Firmware
Precision 5530 Firmware
Precision 5530 2 In 1 Firmware
Precision 5540 Firmware
Precision 5550 Firmware
Precision 5720 Aio Firmware
Precision 5820 Tower Firmware
Precision 7510 Firmware
Precision 7520 Firmware
Precision 7530 Firmware
Precision 7710 Firmware
Precision 7720 Firmware
Precision 7730 Firmware
Precision 7820 Firmware
Precision 7820 Tower Firmware
Precision 7920 Firmware
Precision 7920 Tower Firmware
Precision Tower 3431 Small Form Factor Firmware
Vostro 14 3468 Firmware
Vostro 14 3478 Firmware
Vostro 14 5468 Firmware
Vostro 15 3568 Firmware
Vostro 15 3578 Firmware
Vostro 15 5568 Firmware
Vostro 15 7570 Firmware
Vostro 15 7580 Firmware
Vostro 3070 Firmware
Vostro 3267 Firmware
Vostro 3268 Firmware
Vostro 3458 Firmware
Vostro 3459 Firmware
Vostro 3470 Firmware
Vostro 3471 Firmware
Vostro 3480 Firmware
Vostro 3481 Firmware
Vostro 3490 Firmware
Vostro 3491 Firmware
Vostro 3558 Firmware
Vostro 3559 Firmware
Vostro 3580 Firmware
Vostro 3581 Firmware
Vostro 3583 Firmware
Vostro 3584 Firmware
Vostro 3590 Firmware
Vostro 3591 Firmware
Vostro 3660 Firmware
Vostro 3667 Firmware
Vostro 3668 Firmware
Vostro 3669 Firmware
Vostro 3670 Firmware
Vostro 3671 Firmware
Vostro 3681 Firmware
Vostro 3881 Firmware
Vostro 3888 Firmware
Vostro 5090 Firmware
Vostro 5300 Firmware
Vostro 5370 Firmware
Vostro 5390 Firmware
Vostro 5391 Firmware
Vostro 5471 Firmware
Vostro 5481 Firmware
Vostro 5490 Firmware
Vostro 5581 Firmware
Vostro 5590 Firmware
Vostro 5880 Firmware
Vostro 7500 Firmware
Vostro 7590 Firmware
Wyse 5070 Thin Client Firmware
Wyse 5470 Firmware
Wyse 5470 All In One Firmware
Wyse 7040 Thin Client Firmware
Xps 12 9250 Firmware
Xps 13 9360 Firmware
Xps 13 9370 Firmware
Xps 13 9380 Firmware
Xps 13 2 In 1 9365 Firmware
Xps 13 9300 Firmware
Xps 15 9560 Firmware
Xps 15 2 In 1 9575 Firmware
Xps 15 7500 Firmware
Xps 15 9570 Firmware
Xps 27 Aio 7760 Firmware
Xps 7380 Firmware
Xps 7390 2 In 1 Firmware
Xps 8900 Firmware
4.4
CVSS 3.1 · NVD
Share
Severity by source
NVD
PRIMARY
4.4
MEDIUM
AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None
Lifecycle Timeline
1
CVE Published
Jun 10, 2020 - 21:15 nvd
MEDIUM 4.4
DescriptionNVD
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values.
AnalysisAI
Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-285. Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values. Affected products include: Dell Chengming 3967 Firmware, Dell Chengming 3977 Firmware, Dell Chengming 3980 Firmware, Dell Chengming 3988 Firmware, Dell Chengming 3990 Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Chengming 3967 Firmware
View allSame weakness CWE-285 – Improper Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today
Destination URL
POC code from unknown sources may be malicious, contain backdoors, or be fake.
Always review and test exploit code in a safe, isolated environment (VM/sandbox).
Verify the source reputation and cross-reference with known databases (Exploit-DB, GitHub Security).