PT-2018-11147 · Dell Emc · Dell Emc Unity Operating Environment

Published 2018-05-08 · Updated 2019-01-07 · CVE-2018-1239

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968

Description The issue allows a remote application admin user to potentially execute arbitrary OS commands as system root on the system where Dell EMC Unity is installed, due to multiple OS command injection vulnerabilities.

Recommendations For versions prior to 4.3.0.1522077968, update to version 4.3.0.1522077968 or later to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2018-1239

Affected Products

Dell Emc Unity Operating Environment

References · 4

• https://osv.dev/vulnerability/CVE-2018-1239 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1239 · Security Note
• http://securityfocus.com/bid/104092 · Note
• http://seclists.org/fulldisclosure/2018/May/15 · Note