CVE-2020-5343

7.8 highEPSS 0.3%

High (7.8) in dell os recovery image for microsoft windows 10. EPSS 0.3% chance of exploitation in the next 30 days.

Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissions vulnerability. A local authenticated malicious user with low privileges could exploit this vulnerability to gain unauthorized access on the root folder.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWEs: CWE-863, CWE-277
Published: 2020-05-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:os_recovery_image_for_microsoft_windows_10

References

https://www.dell.com/support/article/SLN321036
https://www.dell.com/support/article/SLN321036

Check your stack JSON