CVE-2019-3704

2019-02-0719:29:00

CWE-78

web.nvd.nist.gov

cve-2019-3704

vnx control station

dell emc

os command injection

sudores

local authenticated

malicious user

arbitrary os commands

root

vulnerability

nvd

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.3%

CPENameOperatorVersion
dell:emc_vnx2_firmwaredell emc vnx2 firmwarelt8.1.9.217

CPE	Name	Operator	Version
dell:emc_vnx2_firmware	dell emc vnx2 firmware	lt	8.1.9.217

References

www.securityfocus.com/bid/106954

seclists.org/fulldisclosure/2019/Feb/8