CVE-2020-5330: dell r1-2210 firmware +4 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2020-5330

CVSS 7.5 · High EPSS 13,3%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada dell r1-2210 firmware, dell r1-2401 firmware +3 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 and older and Dell EMC PowerEdge VRTX Switch Modules firmware versions 2.0.0.77 and older contain an information disclosure vulnerability. A remote unauthenticated attacker could exploit this vulnerability to retrieve sensitive data by sending a specially crafted request to the affected endpoints.

Rincian

Terbit di NVD: 10 April 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
EPSS (30 hari): 13,3% peluang dieksploitasi; lebih tinggi dari 96,3% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
dell	r1-2210 firmware	Semua versi hingga 3.0.1.2
dell	r1-2401 firmware	Semua versi hingga 3.0.1.2
dell	pc5500 firmware	Semua versi hingga 4.1.0.22
dell	x1000 firmware	Semua versi hingga 2.0.0.77
dell	x4012 firmware	Semua versi hingga 2.0.0.77

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.dell.com/support/article/en-us/sln320366/dsa-2020-042-dell-emc-networking-security-update-for-an-i... advisory vendor
http://packetstormsecurity.com/files/171723/Cisco-Dell-Netgear-Information-Disclosure-Hash-Decrypter.html exploit · advisory pihak ketiga · vdb entry

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.