Sign-up

ID

VAR-202007-1285


CVE

CVE-2020-5374


TITLE

Dell EMC OpenManage Integration for Microsoft System Center for SCCM  and  SCVMM  Vulnerability in Using Hard Coded Credentials

Trust: 0.8

sources: JVNDB: JVNDB-2020-008133

DESCRIPTION

Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices

Trust: 1.71

sources: NVD: CVE-2020-5374 // JVNDB: JVNDB-2020-008133 // VULHUB: VHN-183499

AFFECTED PRODUCTS

vendor:dellmodel:emc omimssc for scvmmscope:ltversion:7.2.1

Trust: 1.0

vendor:dellmodel:emc omimssc for sccmscope:ltversion:7.2.1

Trust: 1.0

vendor:デルmodel:emc omimssc for sccmscope:ltversion:7.2.1

Trust: 0.8

vendor:デルmodel:emc omimssc for scvmmscope:ltversion:7.2.1

Trust: 0.8

sources: JVNDB: JVNDB-2020-008133 // NVD: CVE-2020-5374

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-5374
value: HIGH

Trust: 1.0

security_alert@emc.com: CVE-2020-5374
value: HIGH

Trust: 1.0

NVD: CVE-2020-5374
value: HIGH

Trust: 0.8

CNNVD: CNNVD-202007-868
value: HIGH

Trust: 0.6

VULHUB: VHN-183499
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2020-5374
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-183499
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2020-5374
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

security_alert@emc.com: CVE-2020-5374
baseSeverity: HIGH
baseScore: 8.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: LOW
availabilityImpact: LOW
exploitabilityScore: 2.8
impactScore: 5.3
version: 3.1

Trust: 1.0

NVD: CVE-2020-5374
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-183499 // JVNDB: JVNDB-2020-008133 // CNNVD: CNNVD-202007-868 // NVD: CVE-2020-5374 // NVD: CVE-2020-5374

PROBLEMTYPE DATA

problemtype:CWE-798

Trust: 1.1

problemtype:CWE-256

Trust: 1.0

problemtype:Using hardcoded credentials (CWE-798) [NVD Evaluation ]

Trust: 0.8

sources: VULHUB: VHN-183499 // JVNDB: JVNDB-2020-008133 // NVD: CVE-2020-5374

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202007-868

TYPE

trust management problem

Trust: 0.6

sources: CNNVD: CNNVD-202007-868

PATCH

title:DSA-2020-163url:https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmanage-integration-for-microsoft-system-center-multiple-vulnerabilities?lang=en

Trust: 0.8

title:Dell EMC OpenManage Integration for Microsoft System Center Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=123918

Trust: 0.6

sources: JVNDB: JVNDB-2020-008133 // CNNVD: CNNVD-202007-868

EXTERNAL IDS

db:NVDid:CVE-2020-5374

Trust: 2.5

db:JVNDBid:JVNDB-2020-008133

Trust: 0.8

db:CNNVDid:CNNVD-202007-868

Trust: 0.7

db:VULHUBid:VHN-183499

Trust: 0.1

sources: VULHUB: VHN-183499 // JVNDB: JVNDB-2020-008133 // CNNVD: CNNVD-202007-868 // NVD: CVE-2020-5374

REFERENCES

url:https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmanage-integration-for-microsoft-system-center-multiple-vulnerabilities?lang=en

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2020-5374

Trust: 1.4

url:https://vigilance.fr/vulnerability/dell-emc-openmanage-integration-for-microsoft-two-vulnerabilities-32834

Trust: 0.6

sources: VULHUB: VHN-183499 // JVNDB: JVNDB-2020-008133 // CNNVD: CNNVD-202007-868 // NVD: CVE-2020-5374

SOURCES

db:VULHUBid:VHN-183499
db:JVNDBid:JVNDB-2020-008133
db:CNNVDid:CNNVD-202007-868
db:NVDid:CVE-2020-5374

LAST UPDATE DATE

2024-11-23T22:55:06.303000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-183499date:2020-07-21T00:00:00
db:JVNDBid:JVNDB-2020-008133date:2020-09-03T00:00:00
db:CNNVDid:CNNVD-202007-868date:2021-01-04T00:00:00
db:NVDid:CVE-2020-5374date:2024-11-21T05:34:01.443

SOURCES RELEASE DATE

db:VULHUBid:VHN-183499date:2020-07-14T00:00:00
db:JVNDBid:JVNDB-2020-008133date:2020-09-03T00:00:00
db:CNNVDid:CNNVD-202007-868date:2020-07-14T00:00:00
db:NVDid:CVE-2020-5374date:2020-07-14T20:15:11.660