CVE-2019-3737: high-severity vulnerability in Dell EMC Avamar
Dell EMC Avamar Security Update for ADMe Web UI Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.6epss 1.8%
Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Affected products
Dell EMC · AvamarRelated CVEs — Dell EMC Avamar
In the same product, most dangerous first.
CVE-2018-11066—Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution VulnerabilityEPSS 9.9%CVE-2018-11067—Dell EMC Avamar and Integrated Data Protection Appliance Open Redirection VulnerabilityEPSS 1.8%CVE-2018-11077—Dell EMC Avamar and Integrated Data Protection Appliance Command Injection VulnerabilityEPSS 1.0%CVE-2018-11076—Dell EMC Avamar and Integrated Data Protection Appliance Information Exposure VulnerabilityEPSS 0.8%