8.1
High
CVE-2020-5327 Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data…
Description
Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerability. When the server is exposed to the internet and Windows Firewall is disabled, a remote unauthenticated attacker may exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell Encryption Enterprise 10.2 | earliest → < 10.2.10 | 10.2.10 |
Other CVEs of Dell Encryption Enterprise
The 4 CVEs of Dell Encryption Enterprise →
CVE-2020-5385
Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege…
6.7
Medium
CVE-2020-5358
Dell Encryption versions prior to 10.7 and Dell Endpoint Security Suite versions prior to 2.7 contain a privilege…
6.7
Medium
CVE-2019-3745
The vulnerability is limited to the installers of Dell Encryption Enterprise versions prior to 10.4.0 and Dell…
6.7
Medium