Dell Emc Unity VSA Operating Environment vulnerabilities

3 CVEs affecting Dell Emc Unity VSA Operating Environment, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-29490, published 2021-01-05.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-29490, published 2021-01-05. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports. A remote authenticated attacker could potentially…
• CVE-2020-26199, published 2021-01-05. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text password storage vulnerability. A user credentials (including the Unisphere admin privilege user) password…
• CVE-2020-29489, published 2021-01-05. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contains a plain-text password storage vulnerability. A user credentials (including the Unisphere admin privilege user) password…