Vulnerability CVE-2018-1239

Vulnerability CVE-2018-1239

Published: 2018-05-08

Description:

Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities. A remote application admin user could potentially exploit the vulnerabilities to execute arbitrary OS commands as system root on the system where Dell EMC Unity is installed.

Type:

CWE-78

(Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') )

CVSS2 => (AV:N/AC:L/Au:S/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
9/10	10/10	8/10

Exploit range	Attack complexity	Authentication
Remote	Low	Single time
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
DELL -> Emc unity operating environment
DELL -> Emc unityvsa operating environment

References:

http://seclists.org/fulldisclosure/2018/May/15

http://www.securityfocus.com/bid/104092

Copyright 2024, cxsecurity.com