CVE-2020-5368

CRITICAL

Dell EMC VxRail 4.7.410-4.7.411 - Unauthenticated Sensitive Information Exposure

Title source: llm

Description

Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. A remote unauthenticated attacker may exploit this vulnerability to obtain sensitive information in an encrypted form.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://www.dell.com/support/security/en-us/details/544058/DSA-2020-136-Dell-EMC-VxRail-Appliance-Improper-Authentication-Vulnerability

Scores

CVSS v3 9.8

EPSS 0.0063

EPSS Percentile 70.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-862

Status published

Products (6)

dell/vxrail_d560_firmware 4.7.410

dell/vxrail_d560_firmware 4.7.411

dell/vxrail_d560_firmware 4.7.510

dell/vxrail_d560f_firmware 4.7.410

dell/vxrail_d560f_firmware 4.7.411

dell/vxrail_d560f_firmware 4.7.510

Published Jul 06, 2020

Tracked Since Feb 18, 2026