CVE-2018-1239

Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities. A remote application admin user could potentially exploit the vulnerabilities to execute arbitrary OS commands as system root on the system where Dell EMC Unity is installed.

Score

CVSS 3.0 7.2 High

Status

Modified - security_alert@emc.com

Published

2018-05-08

Last modified

2024-09-16

Weaknesses

CWE-78

Affected products

• Emc Unity Operating Environment (Dell)
• Emc Unityvsa Operating Environment (Dell)
• Unity Operating Environment Oe (Dell Emc)

References

• http://seclists.org/fulldisclosure/2018/May/15
• http://www.securityfocus.com/bid/104092