CVE-2020-5352

Dell EMC Data Protection Advisor 6.4, 6.5 and 18.1 contain an OS command injection vulnerability. A remote authenticated malicious user may exploit this vulnerability to execute arbitrary commands on the affected system.

Score

CVSS 3.1 8.8 High

Status

Modified - security_alert@emc.com

Published

2020-07-06

Last modified

2024-09-16

Weaknesses

CWE-78

Affected products

• Data Protection Advisor (Dell)
• Emc Data Protection Advisor (Dell)

References

• https://www.dell.com/support/security/en-us/details/542719/DSA-2020-081-Dell-EMC-Data-Protection-Advisor-OS-Command-Inj…