PT-2020-18436 · Dell Emc · Dell Emc Powerstore

Published 2020-07-06 · Updated 2020-07-13 · CVE-2020-5372

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC PowerStore versions prior to 1.0.1.0.5.002

Description The issue exposes test interface ports to the external network, allowing a remote unauthenticated attacker to potentially cause Denial of Service via these ports, which are not used during the runtime environment.

Recommendations For versions prior to 1.0.1.0.5.002, update to version 1.0.1.0.5.002 or later to resolve the issue. As a temporary workaround, consider restricting access to the test interface ports to minimize the risk of exploitation.

Fix

Incorrect Authorization

Unsafe Debug Access Level

Weakness Enumeration

CWE-863

CWE-1244

Related Identifiers

CVE-2020-5372

Affected Products

Dell Emc Powerstore

References · 4

• https://dell.com/support/security/en-us/details/544738/DSA-2020-159-Dell-EMC-PowerStore-Family-Improper-Authorization-Vulnerability · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5372 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5372 · Vendor Advisory
• https://t.me/cvenotify/4879 · Telegram Post