CVE-2019-18580

CRITICAL 10.0CVE-2019-18580 · Published 26/11/2019 · updated 17/06/2026

In short

CVE-2019-18580 is a CRITICAL (CVSS 10.0) vulnerability affecting emc storage monitoring and reporting (dell).
Chance of exploitation in the next 30 days (EPSS): 4.9%, higher than 92.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
emc storage monitoring and reporting dell	`= 4.3.1`	No fix yet

Description

Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending a crafted RMI request to execute arbitrary code on the target host.

References

dell.com/support/security/en-us/details/538977/DSA-2019-176-Dell-EMC-Storage-Monitoring-and-Reporting-SMR-Java-RMI-Deserialization-of-Untruste · Vendor Advisory

More vulnerabilities in emc storage monitoring and reporting

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free