CVE & CISA-KEV CatalogNVD
CVE-2020-5326
MEDIUM6.1
CVSS v3
Description
Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot Intel Rapid Storage Response Technology (iRST) Manager menu. An attacker with physical access to the system could perform unauthorized changes to the BIOS Setup configuration settings without requiring the BIOS Admin password by selecting the Optimized Defaults option in the pre-boot iRST Manager.
How to fix
Remediation Available
chengming 3980 firmwareNVD
embedded box pc 5000 firmwareNVD
g3 3579 firmwareNVD
g3 3590 firmwareNVD
g3 3779 firmwareNVD
g5 5587 firmwareNVD
g5 5590 firmwareNVD
g7 7588 firmwareNVD
g7 7590 firmwareNVD
g7 7790 firmwareNVD
inspiron 14 gaming 7466 firmwareNVD
inspiron 14 gaming 7467 firmwareNVD
inspiron 15 7572 firmwareNVD
inspiron 15 gaming 7566 firmwareNVD
inspiron 15 gaming 7567 firmwareNVD
inspiron 15 gaming 7577 firmwareNVD
inspiron 3470 firmwareNVD
inspiron 3480 firmwareNVD
inspiron 3481 firmwareNVD
inspiron 3580 firmwareNVD
inspiron 3581 firmwareNVD
inspiron 3583 firmwareNVD
inspiron 3584 firmwareNVD
inspiron 3670 firmwareNVD
inspiron 3780 firmwareNVD
inspiron 3781 firmwareNVD
inspiron 5370 firmwareNVD
inspiron 5480 firmwareNVD
inspiron 5481 firmwareNVD
inspiron 5482 firmwareNVD
inspiron 5488 firmwareNVD
inspiron 5570 firmwareNVD
inspiron 5580 firmwareNVD
inspiron 5582 firmwareNVD
inspiron 5770 firmwareNVD
inspiron 7380 firmwareNVD
inspiron 7386 firmwareNVD
inspiron 7472 firmwareNVD
inspiron 7580 firmwareNVD
inspiron 7586 firmwareNVD
inspiron 7590 firmwareNVD
inspiron 7591 firmwareNVD
inspiron 7786 firmwareNVD
latitude 3300 firmwareNVD
latitude 3460 firmwareNVD
latitude 3480 firmwareNVD
latitude 3490 firmwareNVD
latitude 3580 firmwareNVD
latitude 3590 firmwareNVD
latitude 5175 firmwareNVD
latitude 5179 firmwareNVD
latitude 5280 firmwareNVD
latitude 5288 firmwareNVD
latitude 5289 firmwareNVD
latitude 5290 firmwareNVD
latitude 5300 firmwareNVD
latitude 5400 firmwareNVD
latitude 5401 firmwareNVD
latitude 5414 firmwareNVD
latitude 5420 rugged firmwareNVD
latitude 5424 rugged firmwareNVD
latitude 5480 firmwareNVD
latitude 5488 firmwareNVD
latitude 5490 firmwareNVD
latitude 5491 firmwareNVD
latitude 5500 firmwareNVD
latitude 5501 firmwareNVD
latitude 5580 firmwareNVD
latitude 5590 firmwareNVD
latitude 5591 firmwareNVD
latitude 7202 firmwareNVD
latitude 7212 firmwareNVD
latitude 7214 firmwareNVD
latitude 7275 firmwareNVD
latitude 7280 firmwareNVD
latitude 7285 firmwareNVD
latitude 7290 firmwareNVD
latitude 7300 firmwareNVD
latitude 7370 firmwareNVD
latitude 7380 firmwareNVD
latitude 7389 firmwareNVD
latitude 7390 firmwareNVD
latitude 7400 firmwareNVD
latitude 7414 firmwareNVD
latitude 7424 rugged extreme firmwareNVD
latitude 7480 firmwareNVD
latitude 7490 firmwareNVD
latitude e5270 firmwareNVD
latitude e5470 firmwareNVD
latitude e5570 firmwareNVD
latitude e7270 firmwareNVD
latitude e7470 firmwareNVD
optiplex 3040 firmwareNVD
optiplex 3046 firmwareNVD
optiplex 3050 firmwareNVD
optiplex 3060 firmwareNVD
optiplex 3070 firmwareNVD
optiplex 3240 firmwareNVD
optiplex 5040 firmwareNVD
optiplex 5050 firmwareNVD
optiplex 5060 firmwareNVD
optiplex 5070 firmwareNVD
optiplex 5250 firmwareNVD
optiplex 5260 firmwareNVD
optiplex 5270 firmwareNVD
optiplex 7040 firmwareNVD
optiplex 7050 firmwareNVD
optiplex 7060 firmwareNVD
optiplex 7070 firmwareNVD
optiplex 7440 firmwareNVD
optiplex 7450 firmwareNVD
optiplex 7460 firmwareNVD
optiplex 7470 firmwareNVD
optiplex 7760 firmwareNVD
optiplex 7770 firmwareNVD
optiplex xe3 firmwareNVD
precision 3420 firmwareNVD
precision 3430 firmwareNVD
precision 3431 firmwareNVD
precision 3510 firmwareNVD
precision 3520 firmwareNVD
precision 3530 firmwareNVD
precision 3540 firmwareNVD
precision 3541 firmwareNVD
precision 3620 firmwareNVD
precision 3630 firmwareNVD
precision 3930 firmwareNVD
precision 5510 firmwareNVD
precision 5520 firmwareNVD
precision 5530 firmwareNVD
precision 5720 firmwareNVD
precision 5810 firmwareNVD
precision 5820 firmwareNVD
precision 7510 firmwareNVD
precision 7520 firmwareNVD
precision 7530 firmwareNVD
precision 7540 firmwareNVD
precision 7710 firmwareNVD
precision 7720 firmwareNVD
precision 7730 firmwareNVD
precision 7740 firmwareNVD
precision 7810 firmwareNVD
precision 7820 firmwareNVD
precision 7920 firmwareNVD
vostro 15 7570 firmwareNVD
vostro 3070 firmwareNVD
vostro 3470 firmwareNVD
vostro 3480 firmwareNVD
vostro 3481 firmwareNVD
vostro 3580 firmwareNVD
vostro 3581 firmwareNVD
vostro 3583 firmwareNVD
vostro 3584 firmwareNVD
vostro 3670 firmwareNVD
vostro 5370 firmwareNVD
vostro 5471 firmwareNVD
vostro 5481 firmwareNVD
vostro 5581 firmwareNVD
vostro 7580 firmwareNVD
vostro 7590 firmwareNVD
wyse 5070 firmwareNVD
wyse 7040 firmwareNVD
xps 12 9250 firmwareNVD
xps 13 9343 firmwareNVD
xps 13 9350 firmwareNVD
xps 13 9360 firmwareNVD
xps 13 9380 firmwareNVD
xps 15 9550 firmwareNVD
xps 15 9560 firmwareNVD
xps 15 9570 firmwareNVD
xps 15 9575 firmwareNVD
xps 27 7760 firmwareNVD
xps 8900 firmwareNVD
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorPhysical
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeChanged
Impact
ConfidentialityLow
IntegrityNone
AvailabilityHigh
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H
Exploit Intelligence
0.35%probability of exploitation in 30 days
27thpercentile
Low risk: more likely to be exploited than 27% of all known CVEs.
References
Vendor Advisory1
Related Vulnerabilities
Other CWE-306 (Missing Authentication for Critical Function) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2017-10271 | High | 7.5 | 100% | KEV + Ransom | - |
| CVE-2023-42793 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2025-3248 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2022-1388 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2021-37415 | Critical | 9.8 | 100% | KEV | - |
| CVE-2023-21839 | High | 7.5 | 100% | KEV | - |
Embed a live status badge for CVE-2020-5326
Markdown
[](https://tridentstack.com/cve/CVE-2020-5326)HTML
<a href="https://tridentstack.com/cve/CVE-2020-5326"><img src="https://tridentstack.com/cve/badge/CVE-2020-5326.svg" alt="CVE-2020-5326"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.