Vulnerabilities > CVE-2020-5327 - Deserialization of Untrusted Data vulnerability in Dell Security Management Server 10.2.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerability. When the server is exposed to the internet and Windows Firewall is disabled, a remote unauthenticated attacker may exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |