PT-2018-10280 · Dell Emc · Dell Emc Integrated Data Protection Appliance+1

Publicado 2018-11-26 · Atualizado 2019-10-03 · CVE-2018-11066

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.2.0 through 7.5.1, 18.1 Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0 through 2.2

Description The issue allows a remote unauthenticated attacker to potentially execute arbitrary commands on the server. This is a Remote Code Execution issue.

Recommendations For Dell EMC Avamar Server versions 7.2.0 through 7.5.1, 18.1, update to a version that contains a fix for this issue. For Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0 through 2.2, update to a version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2018-11066

Produtos afetados

Dell Emc Avamar Server

Dell Emc Integrated Data Protection Appliance

Referências · 6

• http://securitytracker.com/id/1042153 · Nota
• https://seclists.org/fulldisclosure/2018/Nov/49 · Nota
• http://securityfocus.com/bid/105968 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-11066 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-11066 · Aviso do Fabricante
• https://vmware.com/security/advisories/VMSA-2018-0029.html · Correção