DSA-2020-042: Dell Networking Security Update for an Information Disclosure Vulnerability
Summary: Security Advisory information for the Dell EMC Networking Security Update for an Information Disclosure Vulnerability
Impact
High
Details
- Information Disclosure Vulnerability
CVE-2020-5330
Dell X-Series firmware versions 3.0.1.2 and older, Dell PC5500 firmware versions 4.1.0.22 and older and VRTX Switch Modules firmware versions 2.0.0.77 and older contain an information disclosure vulnerability. A remote unauthenticated attacker could exploit this vulnerability to retrieve sensitive data by sending a specially crafted request to the affected endpoints.
8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Information Disclosure Vulnerability
CVE-2020-5330
Dell X-Series firmware versions 3.0.1.2 and older, Dell PC5500 firmware versions 4.1.0.22 and older and VRTX Switch Modules firmware versions 2.0.0.77 and older contain an information disclosure vulnerability. A remote unauthenticated attacker could exploit this vulnerability to retrieve sensitive data by sending a specially crafted request to the affected endpoints.
8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products & Remediation
Affected Products:
Dell X-Series firmware versions 3.0.1.2 and older
Dell PC5500 firmware versions 4.1.0.22 and older
Dell VRTX Switches firmware versions 2.0.0.77 and older
Resolution:
The following Dell Networking release contains resolutions to these vulnerabilities:
- VRTX Series Switches:
- R1-2210 : http://www.dell.com/support/home/Drivers/DriversDetails?driverId=W4W2D
- R1-2401: http://www.dell.com/support/home/Drivers/DriversDetails?driverId=MD36K
Dell PC5500 Series:
-
Dell Networking X-Series:
Dell recommends all customers upgrade at the earliest opportunity.
Affected Products:
Dell X-Series firmware versions 3.0.1.2 and older
Dell PC5500 firmware versions 4.1.0.22 and older
Dell VRTX Switches firmware versions 2.0.0.77 and older
Resolution:
The following Dell Networking release contains resolutions to these vulnerabilities:
- VRTX Series Switches:
- R1-2210 : http://www.dell.com/support/home/Drivers/DriversDetails?driverId=W4W2D
- R1-2401: http://www.dell.com/support/home/Drivers/DriversDetails?driverId=MD36K
Dell PC5500 Series:
-
Dell Networking X-Series:
Dell recommends all customers upgrade at the earliest opportunity.
Acknowledgements
Dell EMC would like to thank Ken Pyle from CYBIR for reporting this vulnerability.