CVE-2020-29490 - Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports · CoreCVE

Back Back to CVE browser

HIGH

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports

Published Jan 5, 2021

7.5

HIGH

CVSS 3.1

EPSS 1.50%

Description

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.0.4.0.5.012 contain a Denial of Service vulnerability on NAS Servers with NFS exports. A remote authenticated attacker could potentially exploit this vulnerability and cause Denial of Service (Storage Processor Panic) by sending specially crafted UDP requests.

Affected products

Vendor Dell Product Unity Default
unknown
Affected
- ≥ unspecified, < 5.0.4.0.5.012

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Dell	Unity	unknown	Affected ≥ unspecified, < 5.0.4.0.5.012

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21858
Advisory
https://www.dell.com/support/kbdoc/000181248
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-21858		Advisory
https://www.dell.com/support/kbdoc/000181248		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Jan 5, 2021

Updated Sep 16, 2024

Reserved Dec 3, 2020

Link CVE-2020-29490

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-29490

Red Hat

No data

ENISA EUVD

Assigner dell

Published Jan 5, 2021

Updated Sep 16, 2024

Link EUVD-2020-21858

GitHub

No data