deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-20108
Published: 2021-07-19
Description: Manage Engine Asset Explorer Agent 1.0.34 listens on port 9000 for incoming commands over HTTPS from Manage Engine Server. The HTTPS certificates are not verified which allows any arbitrary user on the network to send commands over port 9000. While these commands may not be executed (due to authtoken validation), the Asset Explorer agent will reach out to the manage engine server for an HTTP request. During this process, AEAgent.cpp allocates 0x66 bytes using "malloc". This memory is never free-ed in the program, causing a memory leak. Additionally, the instruction sent to aeagent (ie: NEWSCAN, DELTASCAN, etc) is converted to a unicode string, but is never freed. These memory leaks allow a remote attacker to exploit a Denial of Service scenario through repetitively sending these commands to an agent and eventually crashing it the agent due to an out-of-memory condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://www.tenable.com/security/research/tra-2021-29; https://www.tenable.com/security/research/tra-2021-29
CVE: CVE-2021-20109
Published: 2021-07-19
Description: Due to the Asset Explorer agent not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP address. This will allow an attacker to send a NEWSCAN request to a listening agent on the network as well as receive the agent's HTTP request verifying its authtoken. In AEAgent.cpp, the agent responding back over HTTP is vulnerable to a Heap Overflow if the POST payload response is too large. The POST payload response is converted to Unicode using vswprintf. This is written to a buffer only 0x2000 bytes big. If POST payload is larger, then heap overflow will occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://www.tenable.com/security/research/tra-2021-30; https://www.tenable.com/security/research/tra-2021-30
CVE: CVE-2021-20110
Published: 2021-07-19
Description: Due to Manage Engine Asset Explorer Agent 1.0.34 not validating HTTPS certificates, an attacker on the network can statically configure their IP address to match the Asset Explorer's Server IP address. This will allow an attacker to send a NEWSCAN request to a listening agent on the network as well as receive the agent's HTTP request verifying its authtoken. In httphandler.cpp, the agent reaching out over HTTP is vulnerable to an Integer Overflow, which can be turned into a Heap Overflow allowing for remote code execution as NT AUTHORITY/SYSTEM on the agent machine. The Integer Overflow occurs when receiving POST response from the Manage Engine server, and the agent calling "HttpQueryInfoW" in order to get the "Content-Length" size from the incoming POST request. This size is taken, but multiplied to a larger amount. If an attacker specifies a Content-Length size of[PII_REDACTED] or larger, this integer arithmetic will wrap the value back around to smaller integer, then calls "calloc" with this size to allocate memory. The following API "InternetReadFile" will copy the POST data into this buffer, which will be too small for the contents, and cause heap overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190
References: https://www.tenable.com/security/research/tra-2021-31; https://www.tenable.com/security/research/tra-2021-31
CVE: CVE-2021-35043
Published: 2021-07-19
Description: OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/nahsra/antisamy/pull/87; https://github.com/nahsra/antisamy/releases/tag/v1.6.4; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2021-35449
Published: 2021-07-19
Description: The Lexmark Universal Print Driver version 2.15.1.0 and below, G2 driver 2.7.1.0 and below, G3 driver 3.2.0.0 and below, and G4 driver 4.2.1.0 and below are affected by a privilege escalation vulnerability. A standard low priviliged user can use the driver to execute a DLL of their choosing during the add printer process, resulting in escalation of privileges to SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: http://packetstormsecurity.com/files/163811/Lexmark-Driver-Privilege-Escalation.html; http://support.lexmark.com/alerts/; https://raw.githubusercontent.com/jacob-baines/vuln_disclosure/main/vuln_2021_02.txt
CVE: CVE-2020-5031
Published: 2021-07-19
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 193738.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/193738; https://www.ibm.com/support/pages/node/6473141; https://exchange.xforce.ibmcloud.com/vulnerabilities/193738
CVE: CVE-2021-20507
Published: 2021-07-19
Description: IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198235.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/198235; https://www.ibm.com/support/pages/node/6473141; https://exchange.xforce.ibmcloud.com/vulnerabilities/198235
CVE: CVE-2021-29707
Published: 2021-07-19
Description: IBM HMC (Hardware Management Console) V9.1.910.0 and V9.2.950.0 could allow a local user to escalate their privileges to root access on a restricted shell. IBM X-Force ID: 200879.
CVSS Score: 7.8 (HIGH)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/200879; https://www.ibm.com/support/pages/node/6473347; https://exchange.xforce.ibmcloud.com/vulnerabilities/200879
CVE: CVE-2021-29780
Published: 2021-07-19
Description: IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/203085; https://www.ibm.com/support/pages/node/6473131; https://exchange.xforce.ibmcloud.com/vulnerabilities/203085
CVE: CVE-2020-20230
Published: 2021-07-19
Description: Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the sshd process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://cwe.mitre.org/data/definitions/400.html; https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20230/README.md; https://cwe.mitre.org/data/definitions/400.html
CVE: CVE-2020-22650
Published: 2021-07-19
Description: A memory leak vulnerability in sim-organizer.c of AlienVault Ossim v5 causes a denial of service (DOS) via a system crash triggered by the occurrence of a large number of alarm events.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://github.com/jpalanco/alienvault-ossim/issues/4; https://github.com/jpalanco/alienvault-ossim/issues/4
CVE: CVE-2020-36421
Published: 2021-07-19
Description: An issue was discovered in Arm Mbed TLS before 2.23.0. Because of a side channel in modular exponentiation, an RSA private key used in a secure enclave could be disclosed.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203, CWE-203
References: https://bugs.gentoo.org/730752; https://github.com/ARMmbed/mbedtls/issues/3394; https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7
CVE: CVE-2020-36422
Published: 2021-07-19
Description: An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls_ecp_check_pub_priv, mbedtls_pk_parse_key, mbedtls_pk_parse_keyfile, mbedtls_ecp_mul, and mbedtls_ecp_mul_restartable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://bugs.gentoo.org/730752; https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7; https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
CVE: CVE-2020-36423
Published: 2021-07-19
Description: An issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext because a certain Lucky 13 countermeasure doesn't properly consider the case of a hardware accelerator.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319
References: https://bugs.gentoo.org/730752; https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.7; https://github.com/ARMmbed/mbedtls/releases/tag/v2.23.0
CVE: CVE-2020-36424
Published: 2021-07-19
Description: An issue was discovered in Arm Mbed TLS before 2.24.0. An attacker can recover a private key (for RSA or static Diffie-Hellman) via a side-channel attack against generation of base blinding/unblinding values.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-203
References: https://bugs.gentoo.org/740108; https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8; https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
CVE: CVE-2020-36425
Published: 2021-07-19
Description: An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-295
References: https://bugs.gentoo.org/740108; https://github.com/ARMmbed/mbedtls/issues/3340; https://github.com/ARMmbed/mbedtls/pull/3433
CVE: CVE-2020-36426
Published: 2021-07-19
Description: An issue was discovered in Arm Mbed TLS before 2.24.0. mbedtls_x509_crl_parse_der has a buffer over-read (of one byte).
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://bugs.gentoo.org/740108; https://github.com/ARMmbed/mbedtls/releases/tag/v2.16.8; https://github.com/ARMmbed/mbedtls/releases/tag/v2.24.0
CVE: CVE-2020-36427
Published: 2021-07-19
Description: GNOME gThumb before 3.10.1 allows an application crash via a malformed JPEG image.
CVSS Score: 5.5 (MEDIUM)
References: https://download.gnome.org/sources/gthumb/3.10/gthumb-3.10.1.news; https://mail.gnome.org/archives/gthumb-list/2020-September/msg00001.html; https://download.gnome.org/sources/gthumb/3.10/gthumb-3.10.1.news
CVE: CVE-2021-34675
Published: 2021-07-19
Description: Basix NEX-Forms through 7.8.7 allows authentication bypass for stored PDF reports.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/; https://github.com/rauschecker/CVEs/tree/main/CVE-2021-34675; http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/
CVE: CVE-2021-34676
Published: 2021-07-19
Description: Basix NEX-Forms through 7.8.7 allows authentication bypass for Excel report generation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/; https://github.com/rauschecker/CVEs/tree/main/CVE-2021-34676; http://basixonline.net/nex-forms-wordpress-form-builder-demo/change-log/
CVE: CVE-2021-36797
Published: 2021-07-19
Description: In Victron Energy Venus OS through 2.72, root access is granted by default to anyone with physical access to the device. NOTE: the vendor disagrees with the reporter's opinion about an alleged "security best practices" violation
CVSS Score: 6.8 (MEDIUM)
References: https://github.com/victronenergy/venus/issues/836; https://github.com/victronenergy/venus/issues/836
CVE: CVE-2021-36799
Published: 2021-07-19
Description: KNX ETS5 through 5.7.6 uses the hard-coded password ETS5Password, with a salt value of Ivan Medvedev, allowing local users to read project information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
CVSS Score: 8.8 (HIGH)
CWE: CWE-798
References: http://packetstormsecurity.com/files/165200/ETS5-Password-Recovery-Tool.html; https://github.com/robertguetzkow/ets5-password-recovery; https://www.knx.org/knx-en/for-professionals/software/ets-5-professional/
CVE: CVE-2020-20248
Published: 2021-07-19
Description: Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the memtest process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://cwe.mitre.org/data/definitions/400.html; https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20248/README.md; https://cwe.mitre.org/data/definitions/400.html
CVE: CVE-2020-20249
Published: 2021-07-19
Description: Mikrotik RouterOs before stable 6.47 suffers from a memory corruption vulnerability in the resolver process. By sending a crafted packet, an authenticated remote attacker can cause a Denial of Service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20249/README.md; https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20249/README.md
CVE: CVE-2021-34820
Published: 2021-07-19
Description: Web Path Directory Traversal in the Novus HTTP Server. The Novus HTTP Server is affected by the Directory Traversal for Arbitrary File Access vulnerability. A remote, unauthenticated attacker using an HTTP GET request may be able to exploit this issue to access sensitive data. The issue was discovered in the NMS (Novus Management System) software through 1.51.2
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/163453/Novus-Management-System-Directory-Traversal-Cross-Site-Scripting.html; http://seclists.org/fulldisclosure/2021/Jul/20; http://packetstormsecurity.com/files/163453/Novus-Management-System-Directory-Traversal-Cross-Site-Scripting.html
CVE: CVE-2021-34821
Published: 2021-07-19
Description: Cross Site Scripting (XSS) vulnerability exists in AAT Novus Management System through 1.51.2. The WebUI has wrong HTTP 404 error handling implemented. A remote, unauthenticated attacker may be able to exploit the issue by sending malicious HTTP requests to non-existing URIs. The value of the URL path filename is copied into the HTML document as plain text tags.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://seclists.org/fulldisclosure/2021/Jul/20; https://seclists.org/fulldisclosure/2021/Jul/20
CVE: CVE-2020-22741
Published: 2021-07-19
Description: An issue was discovered in Xuperchain 3.6.0 that allows for attackers to recover any arbitrary users' private key after obtaining the partial signature in multisignature.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://github.com/xuperchain/xuperchain/issues/782; https://github.com/xuperchain/xuperchain/issues/782
CVE: CVE-2021-31590
Published: 2021-07-19
Description: PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control. With a valid JSON Webtoken that is used for authentication and authorization, a user can keep his admin privileges even if he is downgraded to the "user" privilege. Even after a user's account is deleted, the user can still access the administration panel (and add or delete users) and has complete access to the system.
CVSS Score: 8.8 (HIGH)
References: https://github.com/pwndoc/pwndoc/blob/59519735b0d831d8fd96d7c3387f66d28407e583/CHANGELOG.md#040-2021-08-23; https://github.com/pwndoc/pwndoc/commit/15f3dc0e212eda465e05fda0feb002d1bce2939d; https://github.com/pwndoc/pwndoc/commit/ff1b868cec55f5b6c7a91e15a2b0b1f4324121ab
CVE: CVE-2021-34617
Published: 2021-07-19
Description: A remote cross-site scripting (XSS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.13 and below; Aruba Instant 6.5.x: 6.5.4.13 and below; Aruba Instant 8.3.x: 8.3.0.7 and below; Aruba Instant 8.4.x: 8.4.0.5 and below; Aruba Instant 8.5.x: 8.5.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt
CVE: CVE-2021-34618
Published: 2021-07-19
Description: A remote denial of service (DoS) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.4.x: All versions; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability.
CVSS Score: 6.5 (MEDIUM)
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt
CVE: CVE-2021-32760
Published: 2021-07-19
Description: containerd is a container runtime. A bug was found in containerd versions prior to 1.4.8 and 1.5.4 where pulling and extracting a specially-crafted container image can result in Unix file permission changes for existing files in the host’s filesystem. Changes to file permissions can deny access to the expected owner of the file, widen access to others, or set extended bits like setuid, setgid, and sticky. This bug does not directly allow files to be read, modified, or executed without an additional cooperating process. This bug has been fixed in containerd 1.5.4 and 1.4.8. As a workaround, ensure that users only pull images from trusted sources. Linux security modules (LSMs) like SELinux and AppArmor can limit the files potentially affected by this bug through policies and profiles that prevent containerd from interacting with specific files.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-668, CWE-732
References: https://github.com/containerd/containerd/releases/tag/v1.4.8; https://github.com/containerd/containerd/releases/tag/v1.5.4; https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w
CVE: CVE-2021-3135
Published: 2021-07-19
Description: An issue was discovered in the tagDiv Newspaper theme 10.3.9.1 for WordPress. It allows XSS via the wp-admin/admin-ajax.php td_block_id parameter in a td_ajax_block API call.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://tagdiv.com/newspaper/; https://themeforest.net/item/newspaper/5489609; https://tagdiv.com/newspaper/
CVE: CVE-2020-29499
Published: 2021-07-19
Description: Dell EMC PowerStore versions prior to 1.0.3.0.5.006 contain an OS Command Injection vulnerability in PowerStore X environment . A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://www.dell.com/support/kbdoc/000180775; https://www.dell.com/support/kbdoc/000180775
CVE: CVE-2020-29503
Published: 2021-07-19
Description: Dell EMC PowerStore versions prior to 1.0.3.0.5.xxx contain a file permission Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the information disclosure of certain system directory.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.dell.com/support/kbdoc/000180775; https://www.dell.com/support/kbdoc/000180775
CVE: CVE-2020-5315
Published: 2021-07-19
Description: Dell EMC Repository Manager (DRM) version 3.2 contains a plain-text password storage vulnerability. Proxy server user password is stored in a plain text in a local database. A local authenticated malicious user with access to the local file system may use the exposed password to access the with privileges of the compromised user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-256, CWE-522
References: https://www.dell.com/support/article/us/en/04/sln319925/dsa-2020-001-dell-emc-repository-manager-drm-sensitive-data-exposure-vulnerability?lang=en; https://www.dell.com/support/article/us/en/04/sln319925/dsa-2020-001-dell-emc-repository-manager-drm-sensitive-data-exposure-vulnerability?lang=en
CVE: CVE-2020-5320
Published: 2021-07-19
Description: Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain a SQL injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities
CVE: CVE-2020-5321
Published: 2021-07-19
Description: Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to spawn tasks with elevated privileges.
CVSS Score: 7.6 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities
CVE: CVE-2020-5322
Published: 2021-07-19
Description: Dell EMC OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit the vulnerability to execute arbitrary shell commands on the affected system.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities
CVE: CVE-2020-5323
Published: 2021-07-19
Description: Dell EMC OpenManage Enterprise (OME) versions prior to 3.2 and OpenManage Enterprise-Modular (OME-M) versions prior to 1.10.00 contain an injection vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to gain access to sensitive information or cause denial-of-service.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-611, CWE-74
References: https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000176929/dsa-2020-023-dell-emc-openmanage-enterprise-enterprise-modular-multiple-vulnerabilities
CVE: CVE-2020-5349
Published: 2021-07-19
Description: Dell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 contain a hardcoded credential vulnerability. A remote unauthenticated malicious user could exploit this vulnerability and gain administrative privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://www.dell.com/support/article/en-us/sln320599/dsa-2020-074-dell-networking-security-update-for-a-hardcoded-credential-vulnerability?lang=en; https://www.dell.com/support/article/en-us/sln320599/dsa-2020-074-dell-networking-security-update-for-a-hardcoded-credential-vulnerability?lang=en