Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15881)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setDateAndTime method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute arbitrary system commands by configurin...