Dell Emc Unity Xt Operating Environment vulnerabilities

9 CVEs affecting Dell Emc Unity Xt Operating Environment, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22564, published 2023-02-14.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-29490, published 2021-01-05. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports. A remote authenticated attacker could potentially…
• CVE-2020-5319, published 2020-02-06. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH implementation that is used to provide SFTP…
• CVE-2022-22564, published 2023-02-14. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. Dell EMC Unity versions before 5.2.0.0.5.173 , use(es) broken cryptographic algorithm. A remote unauthenticated attacker could potentially exploit this vulnerability by performing MitM attacks and…
• CVE-2021-43589, published 2022-01-24. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system (OS) command injection Vulnerability. A locally authenticated user with high…
• CVE-2020-26199, published 2021-01-05. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a plain-text password storage vulnerability. A user credentials (including the Unisphere admin privilege user) password…
• CVE-2021-21591, published 2021-07-12. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to…
• CVE-2021-21590, published 2021-07-12. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to…
• CVE-2021-21589, published 2021-07-12. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed Initialization. A local authenticated Service user could potentially exploit this vulnerability to…
• CVE-2020-29489, published 2021-01-05. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contains a plain-text password storage vulnerability. A user credentials (including the Unisphere admin privilege user) password…