CVE-2020-5349

The CVE-2020-5349 case concerns Dell EMC Networking S4100 and S5200 series switches manufactured before February 2020 that contain a hardcoded credential vulnerability. The root cause is a hardcoded credential allowing a remote, unauthenticated attacker to escalate to administrative privileges. I...

CVE-2020-5323

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain an injection vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to gain access to sensitive...

CVE-2020-5323

Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 are affected by an injection vulnerability. A remote authenticated attacker with low privileges could potentially access sensitive information or cause a denial of servic...

CVE-2020-5322

Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit the vulnerability to execute arbitrary shell commands on the affected system...

CVE-2020-5322

Summary: CVE-2020-5322 affects Dell EMC OpenManage Enterprise-Modular (OME-M) prior to 1.10.00. A remote authenticated attacker with high privileges could exploit a command injection flaw to run arbitrary shell commands on the affected system, with impact on confidentiality, integrity, and availa...

CVE-2020-5321

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to spawn tasks wit...

CVE-2020-5321

Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an input validation flaw. The vulnerability allows a remote authenticated attacker with high privileges to spawn tasks with elevated privileges. Root cause: impro...

CVE-2020-5320

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a SQL injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to execute SQL commands to...

CVE-2020-5320

Summary: CVE-2020-5320 affects Dell EMC OpenManage Enterprise (OME) and OpenManage Enterprise-Modular (OME-M). The vulnerability is a SQL injection in versions prior to OME 3.2 and OME-M prior to 1.10.00. A remote authenticated attacker with high privileges could potentially execute SQL commands ...

CVE-2020-5315

Dell EMC Repository Manager DRM version 3.2 contains a plain-text password storage vulnerability. Proxy server user password is stored in a plain text in a local database. A local authenticated malicious user with access to the local file system may use the exposed password to access the with...

CVE-2020-5315

Dell EMC Repository Manager (DRM) 3.2 contains a plain-text password storage vulnerability for proxy server credentials in the local database. An attacker with local file-system access and authentication could extract these passwords and gain the compromised user’s privileges. The issue is descri...

CVE-2020-29503

Dell EMC PowerStore versions prior to 1.0.3.0.5.xxx contain a file permission Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the information disclosure of certain system directory...

CVE-2020-29503

Dell EMC PowerStore before version 1.0.3.0.5.xxx contains a file-permission vulnerability that a locally authenticated attacker could exploit to disclose information from certain system directories. The provided documents consistently describe the issue across NVD/CNVD entries; no explicit exploi...

CVE-2020-29499

CVE-2020-29499 affects Dell EMC PowerStore X, with vulnerability in PowerStore OS where versions prior to 1.0.3.0.5.006 allow a locally authenticated attacker to execute arbitrary OS commands on the underlying OS, potentially leading to a full system takeover. The description specifies a local at...

CVE-2020-29499

Dell EMC PowerStore versions prior to 1.0.3.0.5.006 contain an OS Command Injection vulnerability in PowerStore X environment . A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiti...

Dell EMC Networking S4100 和 S5200 信任管理问题漏洞

The DELL EMC Networking S4100 and DELL EMC Networking S5200 are both switches from Dell USA. Dell EMC Networking S4100 and S5200 Series switches manufactured prior to February 2020 have a security vulnerability that can be exploited by an unauthenticated, remote, malicious user to gain...

PT-2021-12392

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue allows a remote authenticated malicious user with high privileges to potentially execute arbitrary shell commands on the affected system. This is...

PT-2021-12390

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise OME versions prior to 3.2 Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue is a SQL injection vulnerability that could be exploited by a remote authenticated malicious...

PT-2021-12396

Name of the Vulnerable Software and Affected Versions Dell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 Description The issue concerns a hardcoded credential vulnerability. A remote unauthenticated malicious user could exploit this vulnerability and gain...

CVE-2020-5322: Improper Neutralization of Special Elements used in an OS Command

Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit the vulnerability to execute arbitrary shell commands on the affected system...