CVE-2020-3389— Cisco Hyperflex HX-Series Software Weak Storage Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-3389
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Hyperflex HX-Series Software Weak Storage Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the installation component of Cisco Hyperflex HX-Series Software could allow an authenticated, local attacker to retrieve the password that was configured at installation on an affected device. The vulnerability exists because sensitive information is stored as clear text. An attacker could exploit this vulnerability by authenticating to an affected device and navigating to the directory that contains sensitive information. A successful exploit could allow the attacker to obtain sensitive information in clear text from the affected device.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
加密问题
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Hyperflex HX-Series Software安装模块加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco HyperFlex Software是美国思科（Cisco）公司的一套套可扩展的分布式文件系统。该系统通过云管理提供统一的计算、存储和网络，并提供企业级数据管理和优化服务。 Cisco Hyperflex HX-Series Software 4.0(2a)及之前版本中的安装组件存在加密问题漏洞，该漏洞源于程序将敏感信息存储为明文形式。本地攻击者可向设备进行身份验证并导航到带有敏感信息的路径利用该漏洞获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco HyperFlex HX Data Platform | n/a | - |
II. Public POCs for CVE-2020-3389
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-3389
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-HYP-WSV-yT3j5hSBvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2020-3389
Same Patch Batch · Cisco · 2020-08-26 · 22 CVEs total
| CVE-2020-3443 | 8.8 HIGH | Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability |
| CVE-2020-3507 | 8.8 HIGH | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execu |
| CVE-2020-3506 | 8.8 HIGH | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Remote Code Execu |
| CVE-2020-3523 | 6.5 MEDIUM | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability |
| CVE-2020-3518 | 6.5 MEDIUM | Cisco Data Center Network Manager Cross-Site Scripting Vulnerability |
| CVE-2020-3505 | 6.5 MEDIUM | Cisco Video Surveillance 8000 Series IP Cameras Cisco Discovery Protocol Memory Leak Vulne |
| CVE-2020-3522 | 6.3 MEDIUM | Cisco Data Center Network Manager Authorization Bypass Vulnerability |
| CVE-2020-3485 | 6.3 MEDIUM | Cisco Vision Dynamic Signage Director Role-Based Access Control Vulnerability |
| CVE-2020-3491 | 5.5 MEDIUM | Cisco Vision Dynamic Signage Director Stored Cross-Site Scripting Vulnerability |
| CVE-2020-3520 | 5.5 MEDIUM | Cisco Data Center Network Manager Information Disclosure Vulnerability |
| CVE-2020-3484 | 5.3 MEDIUM | Cisco Vision Dynamic Signage Director Directory Traversal Information Disclosure Vulnerabi |
| CVE-2020-3521 | 5.3 MEDIUM | Cisco Data Center Network Manager Read File Path Traversal Vulnerability |
| CVE-2020-3490 | 4.9 MEDIUM | Cisco Vision Dynamic Signage Director Path Traversal Vulnerability |
| CVE-2020-3151 | Cisco Connected Mobile Experiences Restricted Shell Escape Vulnerability | |
| CVE-2020-3496 | Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability | |
| CVE-2020-3466 | Cisco DNA Center Cross-Site Scripting Vulnerabilities | |
| CVE-2020-3446 | Cisco vWAAS for Cisco ENCS 5400-W Series and CSP 5000-W Series Default Credentials Vulnera | |
| CVE-2020-3519 | Cisco Data Center Network Manager Path Traversal Vulnerability | |
| CVE-2020-3440 | Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability | |
| CVE-2020-3439 | Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco HyperFlex HX Data Platform
- CVE-2023-20263
Cisco HyperFlex HX Data Platform 输入验证错误漏洞 - CVE-2021-1499
Cisco HyperFlex HX Data Platform File Upload Vulnerability - CVE-2021-1498
Cisco HyperFlex HX Command Injection Vulnerabilities - CVE-2021-1497
Cisco HyperFlex HX Command Injection Vulnerabilities - CVE-2018-15429
Cisco HyperFlex HX Data Platform Software Unauthorized Direc
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-310
V. Comments for CVE-2020-3389
No comments yet