CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H
AI Score
Confidence
High
EPSS
Percentile
40.4%
Dell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability to force a victim’s browser to desynchronize its connection with the website, typically leading to XSS and DoS.
Vendor | Product | Version | CPE |
---|---|---|---|
dell | powervault_me5012_firmware | * | cpe:2.3:o:dell:powervault_me5012_firmware:*:*:*:*:*:*:*:* |
dell | powervault_me5012 | - | cpe:2.3:h:dell:powervault_me5012:-:*:*:*:*:*:*:* |
dell | powervault_me5024_firmware | * | cpe:2.3:o:dell:powervault_me5024_firmware:*:*:*:*:*:*:*:* |
dell | powervault_me5024 | - | cpe:2.3:h:dell:powervault_me5024:-:*:*:*:*:*:*:* |
dell | powervault_me5084_firmware | * | cpe:2.3:o:dell:powervault_me5084_firmware:*:*:*:*:*:*:*:* |
dell | powervault_me5084 | - | cpe:2.3:h:dell:powervault_me5084:-:*:*:*:*:*:*:* |
[
{
"defaultStatus": "unaffected",
"product": "Dell PowerVault ME5",
"vendor": "Dell",
"versions": [
{
"lessThan": "ME5.1.1.0.5",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]