Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-11066

Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 contain a Remote Code Execution vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary commands on the server.

Published

2018-11-26T20:29:00.247

Last Modified

2024-11-21T03:42:36.627

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application dell emc_avamar 7.2.0 Yes
Application dell emc_avamar 7.2.1 Yes
Application dell emc_avamar 7.3.0 Yes
Application dell emc_avamar 7.3.1 Yes
Application dell emc_avamar 7.4.0 Yes
Application dell emc_avamar 7.4.1 Yes
Application dell emc_avamar 7.5.0 Yes
Application dell emc_avamar 7.5.1 Yes
Application dell emc_avamar 18.1 Yes
Application dell emc_integrated_data_protection_appliance 2.0 Yes
Application dell emc_integrated_data_protection_appliance 2.1 Yes
Application dell emc_integrated_data_protection_appliance 2.2 Yes
Application vmware vsphere_data_protection 6.0.0 Yes
Application vmware vsphere_data_protection 6.0.1 Yes
Application vmware vsphere_data_protection 6.0.2 Yes
Application vmware vsphere_data_protection 6.0.3 Yes
Application vmware vsphere_data_protection 6.0.4 Yes
Application vmware vsphere_data_protection 6.0.5 Yes
Application vmware vsphere_data_protection 6.0.6 Yes
Application vmware vsphere_data_protection 6.0.7 Yes
Application vmware vsphere_data_protection 6.0.8 Yes
Application vmware vsphere_data_protection 6.1.0 Yes
Application vmware vsphere_data_protection 6.1.1 Yes
Application vmware vsphere_data_protection 6.1.2 Yes
Application vmware vsphere_data_protection 6.1.3 Yes
Application vmware vsphere_data_protection 6.1.4 Yes
Application vmware vsphere_data_protection 6.1.5 Yes
Application vmware vsphere_data_protection 6.1.6 Yes
Application vmware vsphere_data_protection 6.1.7 Yes
Application vmware vsphere_data_protection 6.1.8 Yes
Application vmware vsphere_data_protection 6.1.9 Yes
References