Vulnerability Description
Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Omimssc For Sccm | < 7.2.1 |
| Dell | Emc Omimssc For Scvmm | < 7.2.1 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmVendor Advisory
- https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmVendor Advisory
FAQ
What is CVE-2020-5374?
CVE-2020-5374 is a vulnerability with a CVSS score of 8.8 (HIGH). Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker...
How severe is CVE-2020-5374?
CVE-2020-5374 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-5374?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Omimssc For Sccm, Dell Emc Omimssc For Scvmm.