CVE-2020-5319

Name of the Vulnerable Software and Affected Versions Dell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009

Description The issue concerns a Denial of Service vulnerability in the NAS Server SSH implementation used for SFTP service on a NAS server. A remote unauthenticated attacker may exploit this by sending an out of order SSH protocol sequence, potentially causing a Denial of Service, specifically a Storage Processor Panic.

Recommendations For versions prior to 5.0.2.0.5.009, update to version 5.0.2.0.5.009 or later to resolve the issue.