PT-2019-16651 · Dell Emc · Dell Vnx2 Oe For File

Publicado 2019-02-07 · Atualizado 2019-10-09 · CVE-2019-3704

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC VNX2 OE for File versions prior to 8.1.9.236

Description The issue is related to an OS command injection vulnerability in VNX Control Station. A local authenticated malicious user could potentially execute arbitrary OS commands as root due to inadequate restriction configured in sudores.

Recommendations For versions prior to 8.1.9.236, update to version 8.1.9.236 or later to resolve the issue.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2019-3704

Produtos afetados

Dell Vnx2 Oe For File

Referências · 4

• https://seclists.org/fulldisclosure/2019/Feb/8 · Nota
• https://osv.dev/vulnerability/CVE-2019-3704 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3704 · Nota de Segurança
• http://securityfocus.com/bid/106954 · Nota