What’s Vulnerable › Vulnerabilities

CVE-2020-5372

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-07-06 · updated 2026-06-17
• Weakness: CWE-1244

Description

Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network. A remote unauthenticated attacker could potentially cause Denial of Service via test interface ports which are not used during run time environment.

Affected products

• Dell Emc Powerstore 1000 Firmware: before 1.0.1.0.5.002 — fixed in 1.0.1.0.5.002
• Dell Emc Powerstore 3000 Firmware: before 1.0.1.0.5.002 — fixed in 1.0.1.0.5.002
• Dell Emc Powerstore 5000 Firmware: before 1.0.1.0.5.002 — fixed in 1.0.1.0.5.002
• Dell Emc Powerstore 7000 Firmware: before 1.0.1.0.5.002 — fixed in 1.0.1.0.5.002
• Dell Emc Powerstore 9000 Firmware: before 1.0.1.0.5.002 — fixed in 1.0.1.0.5.002

How to fix

Upgrade to a fixed version: Dell Emc Powerstore 1000 Firmware 1.0.1.0.5.002; Dell Emc Powerstore 3000 Firmware 1.0.1.0.5.002; Dell Emc Powerstore 5000 Firmware 1.0.1.0.5.002; Dell Emc Powerstore 7000 Firmware 1.0.1.0.5.002; Dell Emc Powerstore 9000 Firmware 1.0.1.0.5.002. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/security/en-us/details/544738/DSA-2020-159-Dell-EMC-PowerStore-Family-Improper-Authorization-Vulnerability
• https://www.dell.com/support/security/en-us/details/544738/DSA-2020-159-Dell-EMC-PowerStore-Family-Improper-Authorization-Vulnerability

Get alerted when CVE-2020-5372 or the next vulnerability affects your stack