9.8crit
CVE-2018-11066
Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerability
Published 7 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
9.9%
percentile 96%
Public exploits
0
none known
Summary
Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain a Remote Code Execution vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary commands on the server.
Exploit prediction (EPSS)
9.91% probability of exploitation in the next 30 days, higher than 96% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Dell EMC Avamar
- Dell EMC Integrated Data Protection Appliance
References
- securityfocus.com /bid/105968 · vdb-entry, x_refsource_BID, x_transferred
- seclists.org /fulldisclosure/2018/Nov/49 · mailing-list, x_refsource_FULLDISC, x_transferred
- vmware.com /security/advisories/VMSA-2018-0029.html · x_refsource_CONFIRM, x_transferred
- securitytracker.com /id/1042153 · vdb-entry, x_refsource_SECTRACK, x_transferred
Sources
- CVE List: CVE-2018-11066
- NVD: CVE-2018-11066
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.