Command injection

2020-04-1518:15:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.2%

JSON

Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM component APIs that could lead to manipulation of passwords and execution of malicious commands on ACM component.

CPENameOperatorVersion
emc_integrated_data_protection_applianceeq2.0
emc_integrated_data_protection_applianceeq2.1
emc_integrated_data_protection_applianceeq2.2
emc_integrated_data_protection_applianceeq2.3
emc_integrated_data_protection_applianceeq2.4

Name	Operator	Version
emc_integrated_data_protection_appliance	eq	2.0
emc_integrated_data_protection_appliance	eq	2.1
emc_integrated_data_protection_appliance	eq	2.2
emc_integrated_data_protection_appliance	eq	2.3
emc_integrated_data_protection_appliance	eq	2.4