Vulnerability · Published Apr 10, 2020 · Assigned by dell
CVE-2020-5330
High 8.1
In plain English
A high-severity information exposure in Dell PowerConnect from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 13.3% (higher than 96% of all known vulnerabilities).
Official description
Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 and older and Dell EMC PowerEdge VRTX Switch Modules firmware versions 2.0.0.77 and older contain an information disclosure vulnerability. A remote unauthenticated attacker could exploit this vulnerability to retrieve sensitive data by sending a specially crafted request to the affected endpoints.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dell PowerConnect | unspecified – before X series 3.0.1.2 and older, PC5500 fw versions 4.1.0.22 and older |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H