CVE-2019-3762

—

CVSS 3.1

7.5 high

EPSS

<1%p49

Published

Mar 18, 2020 (Mar 18, 2020)

Modified

Jun 17, 2026

Description

Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by obtaining a CA signed certificate from Data Protection Central to impersonate a valid system to compromise the integrity of data.

Vendors: dell
Products: emc data protection central, emc integrated data protection appliance
Weakness: CWE-296, CWE-295
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.