CVE-2020-5366: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files...

Dell EMC VxRail Incorrect Authentication Vulnerability

Dell EMC VxRail is a VMware hyperconverged infrastructure appliance from Dell USA. The product contains compute, storage, network, and virtualization resources, among others. A security vulnerability exists in Dell EMC VxRail versions 4.7.410 and 4.7.411. A remote attacker could exploit the...

CVE-2020-5366

Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files...

CVE-2020-5372

Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network. A remote unauthenticated attacker could potentially cause Denial of Service via test interface ports which are not used during run time environment...

CVE-2020-5371

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. An attacker, with network or local file access, could take advantage of insufficiently applied file permissions or gain unauthorized access to files...

CVE-2020-5368

Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. A remote unauthenticated attacker may exploit this vulnerability to obtain sensitive information in an encrypted form...

Command injection

Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...

Design/Logic Flaw

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. An attacker, with network or local file access, could take advantage of insufficiently applied file permissions or gain unauthorized access to files...

Design/Logic Flaw

Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network. A remote unauthenticated attacker could potentially cause Denial of Service via test interface ports which are not used during run time environment...

Authentication flaw

Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. A remote unauthenticated attacker may exploit this vulnerability to obtain sensitive information in an encrypted form...

CVE-2020-5372

Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network. A remote unauthenticated attacker could potentially cause Denial of Service via test interface ports which are not used during run time environment...

CVE-2020-5372

CVE-2020-5372 affects Dell EMC PowerStore versions prior to 1.0.1.0.5.002. The vulnerability exposes test interface ports to the external network, enabling a remote unauthenticated attacker to potentially cause a Denial of Service via test interface ports that are not used during runtime. Public ...

CVE-2020-5368

Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. A remote unauthenticated attacker may exploit this vulnerability to obtain sensitive information in an encrypted form...

CVE-2020-5371

Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. An attacker, with network or local file access, could take advantage of insufficiently applied file permissions or gain unauthorized access to files...

CVE-2020-5368

Dell EMC VxRail versions 4.7.410 and 4.7.411 are affected by an improper authentication vulnerability. The issue allows a remote unauthenticated attacker to access sensitive information in encrypted form. No exploit details are provided in the sources, and the remediation status is not specified ...

CVE-2020-5371

CVE-2020-5371 affects Dell EMC Isilon OneFS (versions 8.2.2 and earlier) and Dell EMC PowerScale (version 9.0.0). A file permissions weakness allows an attacker with network or local access to access restricted files. The vulnerability stems from insufficiently enforced file permissions, enabling...

CVE-2020-5352

Dell EMC Data Protection Advisor (DPA) versions 6.4, 6.5 and 18.1 are affected by an OS command injection vulnerability (CVE-2020-5352). A remote authenticated attacker can execute arbitrary commands on the affected system. The issue is confirmed across multiple feeds (NVD entry and Nessus plugin...

CVE-2020-5352

Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system...

PT-2020-18433

Name of the Vulnerable Software and Affected Versions Dell EMC VxRail versions 4.7.410 and 4.7.411 Description The issue is related to an improper authentication vulnerability. A remote unauthenticated attacker may exploit this to obtain sensitive information in an encrypted form. Recommendations...

PT-2020-18422

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Advisor versions 6.4 through 6.5 Dell EMC Data Protection Advisor version 18.1 Description The issue allows a remote authenticated malicious user to execute arbitrary commands on the affected system due to an OS comman...