CVE-2020-5324 in Client Consumer信息

摘要

由 VulDB • 2026-06-28

Dell Client Consumer 和 Commercial Platforms 存在任意文件覆盖漏洞。该漏洞仅限于 Dell Firmware Update Utility（戴尔固件更新实用程序）在管理员执行期间的时间窗口内发生。在此时间窗口内，本地已认证的具有低权限的恶意用户可通过符号链接攻击诱骗管理员覆盖任意文件来利用此漏洞。该漏洞不影响更新实用程序交付的实际二进制有效载荷。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

Dell

预定

2020-01-03

管理

已接受

条目

VDB-150412

CPE

准备好

CWE

CWE-427 (已确认)

CVSS

7.1 (NVD)

EPSS

0.00252

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2020-5324
NVD	https://nvd.nist.gov/vuln/detail/CVE-2020-5324
CVE Details	https://www.cvedetails.com/cve/CVE-2020-5324/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!