CVE-2020-26186

Description

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode (SMM).

CVSS Version 3.1

nvd

CVE ID: CVE-2020-26186
Base Score: 6.8
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 0.9

emc

CVE ID: CVE-2020-26186
Base Score: 6.8
Base Severity: MEDIUM
Vector String:CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 0.9

CVSS Version 2.0

nvd

CVE ID: CVE-2020-26186
Base Score: 7.2
Base Severity: HIGH
Vector String:AV:L/AC:L/Au:N/C:C/I:C/A:C

Refrence: NVDMITRE