CVE-2018-11179

The CVE-2018-11179 entry concerns Quest DR Series Disk Backup software prior to 4.0.3.1, which, along with related CVEs in the CORE-2018-0002 advisory, contains multiple command-injection vulnerabilities in the DR Series appliances. Affected product: Quest DR Series Disk Backup Software (multiple...

CVE-2018-11183

Quest DR Series Disk Backup Software before 4.0.3.1 contains multiple command-injection vulnerabilities in its JSON-RPC interface, enabling remote code execution (including unauthenticated login) via numerous endpoints. The CoreLabs CORE-2018-0002 advisory details extensive CVEs (e.g., CVE-2018-1...

CVE-2018-11183

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 41 of 46...

CVE-2018-11144

The connected CORE advisory CORE-2018-0002 documents multiple command-injection vulnerabilities in Quest DR Series Disk Backup appliances running versions prior to 4.0.3.1. The issues affect the DR Series web interfaces and JSON-RPC endpoints, enabling remote command execution (unauthenticated in...

CVE-2018-11143

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 1 of 46...

CVE-2018-11143

Summary of available details: Quest DR Series Disk Backup Software prior to version 4.0.3.1 contains multiple command-injection vulnerabilities exposed via its web/JSON-RPC API. The most critical issue, CVE-2018-11143, allows unauthenticated remote command execution through the Logon endpoint, wi...

CVE-2018-11144

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 2 of 46...

CVE-2018-11166

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 24 of 46...

CVE-2018-11166

Summary (supported by provided documents): Quest DR Series Disk Backup Software, versions prior to 4.0.3.1, contains multiple command-injection vulnerabilities (CVE-2018-11143 through CVE-2018-11194) in its DR appliance web/JSON-RPC interfaces. The CoreLabs advisory CORE-2018-0002 details numerou...

CVE-2018-11167

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 25 of 46...

CVE-2018-11164

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 22 of 46...

CVE-2018-11164

CVE-2018-11164 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. Core/ENISA/public docs detail multiple command-injection vulnerabilities exposed via the web UI/JSON-RPC API, enabling remote code execution (some vectors unauthenticated, others requiring an auth token). The flaws aris...

CVE-2018-11163

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 21 of 46...

CVE-2018-11163

Quest DR Series Disk Backup Software before 4.0.3.1 is affected by multiple command‑injection vulnerabilities in the DR Series appliances’ web/JSON‑RPC interface. Public details document a range of CVEs (including CVE-2018-11143 to CVE-2018-11194) that allow remote or authenticated attackers to i...

CVE-2018-11162

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 20 of 46...

CVE-2018-11165

CVE-2018-11165 pertains to Quest DR Series Disk Backup Software before 4.0.3.1, where multiple command-injection vulnerabilities were identified across the DR appliances’ JSON-RPC/Web interfaces. The Core advisory details unauthenticated and authenticated vectors (e.g., CVE-2018-11143 through CVE...

CVE-2018-11170

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 28 of 46...

CVE-2018-11168

Summary: CVE-2018-11168 affects Quest DR Series Disk Backup software prior to 4.0.3.1 and is part of a broader set of command‑injection vulnerabilities in DR Series appliances. The connected documents describe concrete vectors via the JSON‑RPC API that enable remote command execution, including u...

CVE-2018-11191

CVE-2018-11191 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs describes multiple privilege-escalation vectors resulting from the DR appliance web interface and related components: attackers who gain access can escalate from the webserver user (webadmin) to root via local ...

CVE-2018-11184

CVE-2018-11184 affects Quest DR Series Disk Backup Software up to build 4.0.3.1, where the UsageService’s get usage operation can be abused to inject commands via the type parameter (as shown in the 7.42 example). The vulnerability arises from unsanitized user input used to construct a command li...