PT-2018-10280 · Dell Emc · Dell Emc Integrated Data Protection Appliance+1

Published 2018-11-26 · Updated 2019-10-03 · CVE-2018-11066

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.2.0 through 7.5.1, 18.1 Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0 through 2.2

Description The issue allows a remote unauthenticated attacker to potentially execute arbitrary commands on the server. This is a Remote Code Execution issue.

Recommendations For Dell EMC Avamar Server versions 7.2.0 through 7.5.1, 18.1, update to a version that contains a fix for this issue. For Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0 through 2.2, update to a version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2018-11066

Affected Products

Dell Emc Avamar Server

Dell Emc Integrated Data Protection Appliance

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2018-11066 · Security Note
• https://osv.dev/vulnerability/CVE-2018-11066 · Vendor Advisory
• https://vmware.com/security/advisories/VMSA-2018-0029.html · Patch
• http://securitytracker.com/id/1042153 · Note
• https://seclists.org/fulldisclosure/2018/Nov/49 · Note
• http://securityfocus.com/bid/105968 · Note