CVE-2020-5349 Hardcoded credentials in Networking
Remote attackers can use hardcoded credentials to gain administrative privileges on Dell EMC S4100 and S5200 switches.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-5349?
CVE-2020-5349 is a critical vulnerability in Dell Networking, published on 19 Jul 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dell EMC Networking S4100 and S5200 Series Switches manufactured prior to February 2020 contain a hardcoded credential vulnerability. A remote unauthenticated malicious user could exploit this vulnerability and gain administrative privileges.
Weakness: CWE-798
Which versions are affected by CVE-2020-5349?
It affects 13 products.
Products include Dell Emc Powerswitch S4112f-On, Dell Emc Powerswitch S4112t-On, Dell Emc Powerswitch S4128f-On, Dell Emc Powerswitch S4128t-On, Dell Emc Powerswitch S4148f-On, Dell Emc Powerswitch S4148fe-On and 7 more.
How do I fix CVE-2020-5349?
No fix has been published for CVE-2020-5349 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-5349 being exploited?
There is no known exploitation of CVE-2020-5349 in the wild and no public exploit code.
Sources
Also known as GHSA-4m62-4495-gj4g.