CVE-2019-3762

dell emc data protection central, dell emc integrated data protection appliance

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2019-3762

Katalog CVE

CVSS 7.5 · High EPSS 0,65%

Kerentanan Improper Following of a Certificate's Chain of Trust pada dell emc data protection central, dell emc integrated data protection appliance. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by obtaining a CA signed certificate from Data Protection Central to impersonate a valid system to compromise the integrity of data.

Rincian

Terbit di NVD
18 Maret 2020
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-296: Improper Following of a Certificate's Chain of Trust
CWE-295: Improper Certificate Validation
EPSS (30 hari)
0,65% peluang dieksploitasi; lebih tinggi dari 49,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
dell emc data protection central Versi 1.0
dell emc data protection central Versi 1.0.1
dell emc data protection central Versi 18.1
dell emc data protection central Versi 18.2
dell emc data protection central Versi 19.1
dell emc integrated data protection appliance Versi 2.0
dell emc integrated data protection appliance Versi 2.1
dell emc integrated data protection appliance Versi 2.2
dell emc integrated data protection appliance Versi 2.3
dell emc integrated data protection appliance Versi 2.4

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.