CVE-2018-1235: vulnerability in Dell EMC RecoverPoint
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 42%
from disclosure to weapon23 days
Published on NVDMay 29
1st PoC+23d
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege.
Affected products
Dell EMC · Dell EMC RecoverPointDell EMC · Dell EMC RecoverPoint Virtual Machine (VM)public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/44920unverifiedgithubgithub.com/AbsoZed/CVE-2018-1235★ 0cve_referencewww.exploit-db.com/exploits/44920/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Dell EMC RecoverPoint
In the same product, most dangerous first.