CVE Vulnerabilities

CVE-2018-11066

Published: Nov 26, 2018 | Modified: Oct 03, 2019
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain a Remote Code Execution vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary commands on the server.

Affected Software

Name Vendor Start Version End Version
Emc_avamar Dell 7.2.0 (including) 7.2.0 (including)
Emc_avamar Dell 7.2.1 (including) 7.2.1 (including)
Emc_avamar Dell 7.3.0 (including) 7.3.0 (including)
Emc_avamar Dell 7.3.1 (including) 7.3.1 (including)
Emc_avamar Dell 7.4.0 (including) 7.4.0 (including)
Emc_avamar Dell 7.4.1 (including) 7.4.1 (including)
Emc_avamar Dell 7.5.0 (including) 7.5.0 (including)
Emc_avamar Dell 7.5.1 (including) 7.5.1 (including)
Emc_avamar Dell 18.1 (including) 18.1 (including)
Emc_integrated_data_protection_appliance Dell 2.0 (including) 2.0 (including)
Emc_integrated_data_protection_appliance Dell 2.1 (including) 2.1 (including)
Emc_integrated_data_protection_appliance Dell 2.2 (including) 2.2 (including)

References