DSA-2020-042: Dell Networking Security Update for an Information Disclosure Vulnerability

• Information Disclosure Vulnerability

CVE-2020-5330

Dell X-Series firmware versions 3.0.1.2 and older, Dell PC5500 firmware versions 4.1.0.22 and older and VRTX Switch Modules firmware versions 2.0.0.77 and older contain an information disclosure vulnerability. A remote unauthenticated attacker could exploit this vulnerability to retrieve sensitive data by sending a specially crafted request to the affected endpoints.

8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products:
Dell X-Series firmware versions 3.0.1.2 and older
Dell PC5500 firmware versions 4.1.0.22 and older
Dell VRTX Switches firmware versions 2.0.0.77 and older

 

Resolution:

The following Dell Networking release contains resolutions to these vulnerabilities:

• VRTX Series Switches:
  • R1-2210 : http://www.dell.com/support/home/Drivers/DriversDetails?driverId=W4W2D
  • R1-2401: http://www.dell.com/support/home/Drivers/DriversDetails?driverId=MD36K

  Dell PC5500 Series:

  • X1000: http://www.dell.com/support/home/Drivers/DriversDetails?driverId=V41TF
  • X4012: http://www.dell.com/support/home/Drivers/DriversDetails?driverId=NYWYR
• • PC5500 Series: http://www.dell.com/support/home/Drivers/DriversDetails?driverId=VP09H

  Dell Networking X-Series:

Dell recommends all customers upgrade at the earliest opportunity.