What is CVE-2020-5330?

CVE-2020-5330 is a high-severity vulnerability in Dell Powerconnect, classified under Information Disclosure. CVSS score: 8.1/10. Published 2020-04-10.

How severe is CVE-2020-5330?

High severity. CVSS v3 base score is 8.1 out of 10.

Is CVE-2020-5330 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Dell Powerconnect

CVE-2020-5330

Dell EMC Networking X-Series firmware versions 3.0.1.2 and older, Dell EMC Networking PC5500 firmware versions 4.1.0.22 and older and Dell EMC PowerEdge VRTX Switch Modules firmware versions 2.0.0.77 and older contain an information disclo…

Vulnerability class: Information Disclosure

EPSS: 0.129 (95.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Powerconnect — versions unspecified
Dell Pc5500
Dell Pc5500_firmware
Dell R1-2210
Dell R1-2210_firmware
Dell R1-2401
Dell R1-2401_firmware
Dell X1000
Dell X1000_firmware
Dell X4012

Weakness classification (CWE)

CWE-200 — Information Disclosure

Public proof-of-concept exploits

References

security_alert@emc.com (Vendor Advisory)
security_alert@emc.com (Exploit, VDB Entry, Third Party Advisory)

Frequently asked questions

What is CVE-2020-5330?: CVE-2020-5330 is a high-severity vulnerability in Dell Powerconnect, classified under Information Disclosure. CVSS score: 8.1/10. Published 2020-04-10.
How severe is CVE-2020-5330?: High severity. CVSS v3 base score is 8.1 out of 10.
Is CVE-2020-5330 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.