CVE-2020-5349
Critical
Description
Dell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 contain a hardcoded credential vulnerability. A remote unauthenticated malicious user could exploit this vulnerability and gain administrative privileges.
SeverityCritical
CVSS9.8
Exploit probability—
ProductDell Emc Powerswitch
PublishedJul 19, 2021
First seenJul 19, 2021
Weakness typeCWE-798Hard-coded credentials
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell emc_powerswitch_s4112f-on | No range specified | — |
| dell emc_powerswitch_s4112t-on | No range specified | — |
| dell emc_powerswitch_s4128f-on | No range specified | — |
| dell emc_powerswitch_s4128t-on | No range specified | — |
| dell emc_powerswitch_s4148f-on | No range specified | — |
| dell emc_powerswitch_s4148fe-on | No range specified | — |
| dell emc_powerswitch_s4148t-on | No range specified | — |
| dell emc_powerswitch_s4148u-on | No range specified | — |
| dell emc_powerswitch_s5212f-on | No range specified | — |
| dell emc_powerswitch_s5224f-on | No range specified | — |
| dell emc_powerswitch_s5232f-on | No range specified | — |
| dell emc_powerswitch_s5248f-on | No range specified | — |
| dell emc_powerswitch_s5296f-on | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.