CVE-2020-5357

Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File Overwrite vulnerability. The vulnerability is limited to the Dell Dock Firmware Update Utilities during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers.

CVSS v3 6.0 MEDIUM
CVSS v2.0 2.6 LOW

6.0^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 0.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

2.6^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:H/Au:N/C:N/I:P/A:P

Exploitability : 1.9 / Impact : 4.9

Access Vector LOCAL

Access Complexity HIGH

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://www.dell.com/support/article/SLN321564	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:dell:dock_wd15_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:dock_wd15:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:dell:dock_wd19_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:dock_wd19:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:dell:thunderbolt_dock_tb16_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:thunderbolt_dock_tb16:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:dell:precision_dual_usb-c_thunderbolt_dock_-_tb18dc_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:dell:precision_dual_usb-c_thunderbolt_dock_-_tb18dc:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-05-28 20:15

Updated : 2024-02-28 17:47

NVD link : CVE-2020-5357

Mitre link : CVE-2020-5357

CVE.ORG link : CVE-2020-5357

JSON object : View

Products Affected

dell

dock_wd19_firmware
dock_wd15
dock_wd19
dock_wd15_firmware
precision_dual_usb-c_thunderbolt_dock_-_tb18dc
thunderbolt_dock_tb16
precision_dual_usb-c_thunderbolt_dock_-_tb18dc_firmware
thunderbolt_dock_tb16_firmware

CWE

CWE-427

Uncontrolled Search Path Element

{"id": "CVE-2020-5357", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:H/Au:N/C:N/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 1.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.0, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 0.8}, {"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 1.8}]}, "published": "2020-05-28T20:15:12.037", "references": [{"url": "https://www.dell.com/support/article/SLN321564", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-427"}]}, {"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "Dell Dock Firmware Update Utilities for Dell Client Consumer and Commercial docking stations contain an Arbitrary File Overwrite vulnerability. The vulnerability is limited to the Dell Dock Firmware Update Utilities during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. The vulnerability does not affect the actual binary payload that the update utility delivers."}, {"lang": "es", "value": "La Utilidades de Actualizaci\u00f3n de Firmware de Dell Dock para las estaciones de acoplamiento de Dell Client Consumer and Commercial, contiene una vulnerabilidad de Sobrescritura de Archivos Arbitrarios. La vulnerabilidad es limitada a las Utilidades de Actualizaci\u00f3n de Firmware de Dell Dock durante el intervalo de tiempo mientras es ejecutado por un administrador. Durante este per\u00edodo de tiempo, un usuario malicioso poco privilegiado autenticado localmente podr\u00eda explotar esta vulnerabilidad al enga\u00f1ar a un administrador para que sobrescriba archivos arbitrarios por medio de un ataque de tipo symlink. La vulnerabilidad no afecta la carga \u00fatil binaria real que entrega la utilidad de actualizaci\u00f3n."}], "lastModified": "2020-05-29T20:02:24.433", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dell:dock_wd15_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1CD21A72-B8F5-4C91-9584-40D304D32B50", "versionEndExcluding": "1.0.8"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dell:dock_wd15:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F66DCD8A-17AA-4DB7-9AD1-46E04916EE66"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dell:dock_wd19_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB96E94D-3CE3-4170-90A8-BCFBC86F6537", "versionEndExcluding": "1.0.14"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dell:dock_wd19:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "15124DF5-16F4-45FD-94CB-9DBBDA9D7944"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dell:thunderbolt_dock_tb16_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E468B103-F8CD-4C0B-B357-10421B9DDE59", "versionEndExcluding": "1.0.4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dell:thunderbolt_dock_tb16:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "599DAEAA-C0D1-4242-8386-4629B92473A7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:dell:precision_dual_usb-c_thunderbolt_dock_-_tb18dc_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B36DE56-0FF4-42B2-BE19-FC30EE2BD139", "versionEndExcluding": "1.0.10"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:dell:precision_dual_usb-c_thunderbolt_dock_-_tb18dc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E37E5FD4-FDD4-4025-8025-E5785177A92C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security_alert@emc.com"}