CVE-2020-5330

Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 and older and Dell EMC PowerEdge VRTX Switch Modules firmware versions 2.0.0.77 and older contain an information disclosure vulnerability. A remote unauthenticated attacker could exploit this vulnerability to retrieve sensitive data by sending a specially crafted request to the affected endpoints.

Affected

Dell · Dell PowerConnect

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1 EMC

8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

13.26% chance of exploitation in the next 30 days, 96th percentile

Published

2020-04-10

Updated

2024-09-16

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/171723/Cisco-Dell-Netgear-Information-Disclosure-Has…
• SYNgularity1/exploits11★ · 2023-02-13

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51248

Security advisories

• https://www.dell.com/support/article/en-us/sln320366/dsa-2020-042-dell-emc-networking-sec…

References

• CVE Record
• NVD entry

Related

• CVE-2019-15993