PT-2021-11674 · Dell · Dell Emc Unity+2

Published 2021-01-05 · Updated 2021-01-12 · CVE-2020-29490

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012

Description: The issue allows a remote authenticated attacker to cause Denial of Service (Storage Processor Panic) by sending specially crafted UDP requests to NAS Servers with NFS exports.

Recommendations: For versions prior to 5.0.4.0.5.012, update to version 5.0.4.0.5.012 or later to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2020-29490

Affected Products

Dell Emc Unity

Unity Xt

Unityvsa

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-29490 · Security Note
• https://osv.dev/vulnerability/CVE-2020-29490 · Vendor Advisory
• https://dell.com/support/kbdoc/000181248 · Vendor Advisory
• https://t.me/cibsecurity/21641 · Telegram Post