EUVD-2019-13358

Malware in sbrugna...

EUVD-2020-26503

Malware in sbrugna...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

PT-2021-12400

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise OME versions prior to 3.4 Description The issue allows a remote authenticated malicious user with high privileges to potentially exploit an arbitrary file overwrite vulnerability. This can be achieved via directo...

CVE-2020-5370: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2020-5323

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain an injection vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to gain access to sensitive...

PT-2021-12390

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise OME versions prior to 3.2 Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue is a SQL injection vulnerability that could be exploited by a remote authenticated malicious...

CVE-2020-5320: Improper Neutralization of Special Elements used in an SQL Command

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a SQL injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to execute SQL commands to...

PT-2021-12393

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise OME versions prior to 3.2 Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue concerns an injection vulnerability that could be exploited by a remote authenticated malicio...

CVE-2020-5321: Improper Input Validation

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to spawn tasks wit...

CVE-2020-5323: Improper Restriction of XML External Entity Reference

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain an injection vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to gain access to sensitive...

PT-2021-12392

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue allows a remote authenticated malicious user with high privileges to potentially execute arbitrary shell commands on the affected system. This is...

PT-2021-12391

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise OME versions prior to 3.2 Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue is related to improper input validation, which could be exploited by a remote authenticated...

CVE-2020-5322: Improper Neutralization of Special Elements used in an OS Command

Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit the vulnerability to execute arbitrary shell commands on the affected system...

The vulnerability of the software for system management in the One-to-one Dell EMC OpenManage Server Administrator mode, related to authentication procedures that allow a malicious actor to gain access to the administrator’s privileges on the system.

The vulnerability of the software for managing systems in the One-to-one Dell EMC OpenManage Server Administrator mode is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the administrator’s...

CVE-2021-21513

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

PT-2021-2345

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Server Administrator OMSA version 9.5 Description The issue is related to an authentication bypass vulnerability in the Dell EMC OpenManage Server Administrator OMSA when Distributed Web Server DWS is enabled. This...

CVE-2021-21513: Improper Authentication

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

Dell EMC OpenManage Server Administrator 授权问题漏洞

DELL Dell EMC OpenManage Server Administrator is a set of system management solutions from DELL, USA. The program supports online diagnostics, system operation detection, device management, etc. Microsoft Windows is a desktop operating system from Microsoft Corporation. The Dell EMC OpenManage...