CVE-2020-5320: SQL Injection in Dell EMC OpenManage Enterprise

Successful exploitation of CVE-2020-5320 could grant an attacker unauthorized access to sensitive data stored within the OpenManage Enterprise database. An attacker could potentially read, modify, or delete data, including user credentials, system configurations, and performance metrics. The ability to execute arbitrary SQL commands also opens the door to privilege escalation, allowing the attacker to gain control over the entire system. While the vulnerability requires authentication with high privileges, the potential impact is significant, particularly in environments where OME is used for centralized management and monitoring of critical infrastructure.

1. Reserved2020-01-03
2. Published2021-07-19
3. Modified2024-09-16
4. EPSS updated2026-04-02

The primary mitigation for CVE-2020-5320 is to upgrade to Dell EMC OpenManage Enterprise version 3.20 or later. If immediate upgrade is not possible, consider restricting access to the vulnerable endpoints and implementing strict input validation to prevent SQL injection attempts. Review existing user accounts and permissions to ensure that only authorized personnel have access to the OME interface. Monitor system logs for suspicious SQL activity and implement a Web Application Firewall (WAF) with SQL injection protection rules. After upgrade, confirm the vulnerability is resolved by attempting a SQL injection attack on the vulnerable endpoint and verifying that it is blocked.