Vulnerability Details CVE-2020-5330
Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 and older and Dell EMC PowerEdge VRTX Switch Modules firmware versions 2.0.0.77 and older contain an information disclosure vulnerability. A remote unauthenticated attacker could exploit this vulnerability to retrieve sensitive data by sending a specially crafted request to the affected endpoints.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.161
EPSS Ranking 94.4%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/171723/Cisco-Dell-Netgear-Information-Disclosure-Hash-Decrypter.html
- https://www.dell.com/support/article/en-us/sln320366/dsa-2020-042-dell-emc-networking-security-update-for-an-information-disclosure-vulnerability?lang=en
- http://packetstormsecurity.com/files/171723/Cisco-Dell-Netgear-Information-Disclosure-Hash-Decrypter.html
- https://www.dell.com/support/article/en-us/sln320366/dsa-2020-042-dell-emc-networking-security-update-for-an-information-disclosure-vulnerability?lang=en
Products affected by CVE-2020-5330
-
cpe:2.3:h:dell:pc5500:-
-
cpe:2.3:h:dell:r1-2210:-
-
cpe:2.3:h:dell:r1-2401:-
-
cpe:2.3:h:dell:x1000:-
-
cpe:2.3:h:dell:x4012:-
-
cpe:2.3:o:dell:pc5500_firmware:-
-
cpe:2.3:o:dell:pc5500_firmware:4.1.0.22
-
cpe:2.3:o:dell:r1-2210_firmware:-
-
cpe:2.3:o:dell:r1-2210_firmware:2.0.0.82
-
cpe:2.3:o:dell:r1-2210_firmware:3.0.1.2
-
cpe:2.3:o:dell:r1-2401_firmware:-
-
cpe:2.3:o:dell:r1-2401_firmware:2.0.0.82
-
cpe:2.3:o:dell:r1-2401_firmware:3.0.1.2
-
cpe:2.3:o:dell:x1000_firmware:-
-
cpe:2.3:o:dell:x1000_firmware:2.0.0.77
-
cpe:2.3:o:dell:x4012_firmware:-
-
cpe:2.3:o:dell:x4012_firmware:2.0.0.77