CVE-2020-5377

9.1CRITICAL

Key Information:

Vendor
Dell
Status
Dell Open Manage Server Administrator
Vendor
CVE Published:
28 July 2020

Badges

👾 Exploit Exists🟣 EPSS 81%

Summary

Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station.

Affected Version(s)

Dell Open Manage Server Administrator < 9.5

References

https://www.dell.com/support/article/en-us/sln322304/dsa-...
x_refsource_MISC
http://packetstormsecurity.com/files/162110/Dell-OpenMana...
x_refsource_MISC

EPSS Score

81% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.