Deserialization of untrusted data

2020-03-0621:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.3%

JSON

Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerability. When the server is exposed to the internet and Windows Firewall is disabled, a remote unauthenticated attacker may exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host.

CPENameOperatorVersion
security_management_serverlt10.2.10

CPE	Name	Operator	Version
	security_management_server	lt	10.2.10

References

www.dell.com/support/article/SLN320536