cvelist/2020/5xxx/CVE-2020-5387.json

72 lines
2.2 KiB
JSON
Raw Normal View History

2020-01-03 14:01:42 +00:00
{
"CVE_data_meta": {
2020-11-02 21:01:48 +00:00
"ASSIGNER": "secure@dell.com",
"DATE_PUBLIC": "2020-09-29",
"ID": "CVE-2020-5387",
2020-10-01 15:56:45 -04:00
"STATE": "PUBLIC"
2020-11-02 21:01:48 +00:00
},
2020-10-01 15:56:45 -04:00
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
2020-11-02 21:01:48 +00:00
"product_name": "CPG BIOS",
2020-10-01 15:56:45 -04:00
"version": {
"version_data": [
{
2020-11-02 21:01:48 +00:00
"version_affected": "<",
2020-10-01 15:56:45 -04:00
"version_value": "1.13.1"
}
]
}
}
]
2020-11-02 21:01:48 +00:00
},
2020-10-01 15:56:45 -04:00
"vendor_name": "Dell"
}
]
}
2020-11-02 21:01:48 +00:00
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
2020-01-03 14:01:42 +00:00
"description": {
"description_data": [
{
2020-11-02 21:01:48 +00:00
"lang": "eng",
2020-10-01 15:56:45 -04:00
"value": "Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this vulnerability to prevent the system from booting until the exploited boot device is removed."
}
]
2020-11-02 21:01:48 +00:00
},
2020-10-01 15:56:45 -04:00
"impact": {
"cvss": {
2020-11-02 21:01:48 +00:00
"baseScore": 2.3,
"baseSeverity": "Low",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
2020-10-01 15:56:45 -04:00
"version": "3.1"
}
2020-11-02 21:01:48 +00:00
},
2020-10-01 15:56:45 -04:00
"problemtype": {
"problemtype_data": [
{
"description": [
{
2020-11-02 21:01:48 +00:00
"lang": "eng",
2020-10-01 15:56:45 -04:00
"value": "CWE-755: Improper Handling of Exceptional Conditions"
}
]
}
]
2020-11-02 21:01:48 +00:00
},
2020-10-01 15:56:45 -04:00
"references": {
"reference_data": [
{
2020-11-02 21:01:48 +00:00
"refsource": "MISC",
"url": "https://www.dell.com/support/article/SLN322626",
"name": "https://www.dell.com/support/article/SLN322626"
2020-01-03 14:01:42 +00:00
}
]
}
}