Skip to content
OpenAdvisories
Medium · 6.8 CVE-2020-5348 EUVD-2020-26530GHSA-4m8x-97cg-mq8w

Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFI_BOOT_SERVICES in system management mode. A l…

Published Apr 3, 2020 · Updated Sep 17, 2024 · Assigned by dell

Vendor: Dell Product: CPG BIOS

Description

Dell Latitude 7202 Rugged Tablet BIOS versions prior to A28 contain a UAF vulnerability in EFI_BOOT_SERVICES in system management mode. A local unauthenticated attacker may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in system management mode.

Affected products

VendorProductAffectedFixed
Dell CPG BIOS unspecified – < A28 A28

References