Lucene search

DellCVELIST:CVE-2020-5374

HistoryJul 14, 2020 - 7:30 p.m.

CVE-2020-5374

2020-07-1419:30:15

CWE-256

dell

www.cve.org

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L

AI Score

8.8

Confidence

High

EPSS

0.004

Percentile

73.3%

JSON

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices.

CNA Affected

[
  {
    "product": "OMIMSSC (OpenManage Integration for Microsoft System Center)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "7.2.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmanage-integration-for-microsoft-system-center-multiple-vulnerabilities?lang=en