CVE-2018-1183: Improper Restriction of XML External Entity Reference

In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, Dell EMC VASA Provider Virtual Appliance versions prior to 8.4.0.512, Dell EMC SMIS versions prior to 8.4.0.6, Dell EMC VMAX Embedded Management...

CVE-2017-14383: Improper Neutralization of Input During Web Page Generation

In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impacted by a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could...

PT-2018-5628

Name of the Vulnerable Software and Affected Versions: Dell EMC VNX2 versions prior to 8.1.9.217 Dell EMC VNX1 versions prior to 7.1.80.8 Description: A reflected cross-site scripting issue affects the web server error page in VNX Control Station. This could allow a remote unauthenticated attacke...

CVE-2017-4987

In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potentially allow the attacker to execute arbitrary code on the targeted VNX Control Station system, aka...

CVE-2017-4984

In EMC VNX2 OE for File (versions prior to 8.1.9.211) and VNX1 OE for File (versions prior to 7.1.80.8), an unauthenticated remote attacker could elevate privileges to root via a command injection, enabling arbitrary code execution with root privileges on the VNX Control Station. This is a networ...

CVE-2017-4987: Uncontrolled Search Path Element

In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potentially allow the attacker to execute arbitrary code on the targeted VNX Control Station system, aka...

PT-2017-16246

Name of the Vulnerable Software and Affected Versions EMC VNX2 versions prior to 8.1.9.211 EMC VNX1 versions prior to 7.1.80.8 Description A local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may...

PT-2017-16248

Name of the Vulnerable Software and Affected Versions EMC VNX2 versions prior to 8.1.9.211 EMC VNX1 versions prior to 7.1.80.8 Description A local authenticated user can load a maliciously crafted file in the search path, potentially allowing the attacker to execute arbitrary code on the targeted...

PT-2017-2638

Name of the Vulnerable Software and Affected Versions EMC VNX2 versions prior to 8.1.9.211 EMC VNX1 versions prior to 7.1.80.8 Description The issue is related to a lack of input sanitization, which may allow an unauthenticated remote attacker to elevate their permissions to root through a comman...

CVE-2017-4985: Missing Authorization

In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user may potentially escalate their privileges to root due to authorization checks not being performed on certain perl scripts. This may potentially be exploited by an attack...