Vulnerabilities > CVE-2020-5327 - Deserialization of Untrusted Data vulnerability in Dell Security Management Server 10.2.0
Attack vector
NETWORK Attack complexity
MEDIUM Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
Dell Security Management Server versions prior to 10.2.10 contain a Java RMI Deserialization of Untrusted Data vulnerability. When the server is exposed to the internet and Windows Firewall is disabled, a remote unauthenticated attacker may exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |