VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 18, 2020· Updated Jun 17, 2026

CVE-2019-3762

CVE-2019-3762

Description

Data Protection Central versions 1.0, 1.0.1, 18.1, 18.2, and 19.1 contains an Improper Certificate Chain of Trust Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by obtaining a CA signed certificate from Data Protection Central to impersonate a valid system to compromise the integrity of data.

Affected products

12
  • Dell/Emc Data Protection Central5 versions
    cpe:2.3:a:dell:emc_data_protection_central:1.0.1:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:dell:emc_data_protection_central:1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_data_protection_central:1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_data_protection_central:18.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_data_protection_central:18.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_data_protection_central:19.1:*:*:*:*:*:*:*
  • Dell/Emc Integrated Data Protection Appliance5 versions
    cpe:2.3:a:dell:emc_integrated_data_protection_appliance:2.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:dell:emc_integrated_data_protection_appliance:2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_integrated_data_protection_appliance:2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_integrated_data_protection_appliance:2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_integrated_data_protection_appliance:2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:dell:emc_integrated_data_protection_appliance:2.4:*:*:*:*:*:*:*
  • Dell/Data Protection Centralllm-fuzzy2 versions
    <=19.1+ 1 more
    • (no CPE)range: <=19.1
    • (no CPE)range: 1.0, 1.0.1, 18.1, 18.2, 19.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.