CVE-2019-3727

Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may potentially be able to execute arbitrary commands as root.

Score

CVSS 3.0 6.7 Medium

Status

Modified - security_alert@emc.com

Published

2019-05-15

Last modified

2024-09-17

Weaknesses

CWE-78

Affected products

• Emc Recoverpoint (Dell)
• Recoverpoint For Virtual Machines (Dell)
• Recoverpoint (Dell Emc)

References

• http://www.securityfocus.com/bid/108411
• https://www.dell.com/support/security/us/en/04/details/533842/DSA-2019-078-Dell-EMC-RecoverPoint-OS-Command-Injection-V…