PT-2018-10850 · Emc · Emc Recoverpoint+1

Paul Taylor · Published 2018-02-03 · Updated 2021-05-26 · CVE-2018-1185

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC RecoverPoint for Virtual Machines versions prior to 5.1.1 EMC RecoverPoint version 5.1.0.0 EMC RecoverPoint versions prior to 5.0.1.3

Description An issue was discovered that allows a malicious user with admin privileges to escape from the restricted shell to an interactive shell and run arbitrary commands with root privileges due to a command injection vulnerability in the Admin CLI.

Recommendations For EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, update to version 5.1.1 or later. For EMC RecoverPoint version 5.1.0.0, update to a version later than 5.1.0.0. For EMC RecoverPoint versions prior to 5.0.1.3, update to version 5.0.1.3 or later.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-1185

Affected Products

Emc Recoverpoint

Dell Recoverpoint For Virtual Machines

References · 5

• 🔥 https://exploit-db.com/exploits/44614 · Exploit
• https://osv.dev/vulnerability/CVE-2018-1185 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1185 · Security Note
• http://seclists.org/fulldisclosure/2018/Feb/9 · Patch
• http://securitytracker.com/id/1040320 · Note