dell emc-powerswitch-s4112f-on CVE-2020-5349 vulnerability in Dell Products
Published on July 19, 2021

Dell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 contain a hardcoded credential vulnerability. A remote unauthenticated malicious user could exploit this vulnerability and gain administrative privileges.

NVD

Vulnerability Analysis

CVE-2020-5349 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be critical as this vulnerability has a high impact to the confidentiality, integrity and availability of this component.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Use of Hard-coded Credentials

The software contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.


Products Associated with CVE-2020-5349

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-5349 are published in these products:

 
 
 
 
 
 
 
 
 
 
 
 
 

Affected Versions

Dell Networking Version S4100 and S5200 is affected by CVE-2020-5349

Exploit Probability

EPSS
0.36%
Percentile
57.67%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.