Vulnerabilidades em Dell EMC

97 resultados
Análise Vexday

Com 88 CVEs catalogadas e nenhuma em exploração ativa confirmada pelo CISA KEV, Dell EMC apresenta uma taxa de exploração abaixo da média geral do catálogo, o que indica pressão operacional imediata relativamente contida. No entanto, 13 vulnerabilidades possuem prova de conceito pública disponível, o que eleva o risco potencial de exploração futura, especialmente considerando que 4 delas são classificadas como críticas. A falha mais prevalente é do tipo CWE-321 (uso de chaves criptográficas fixas), padrão que tende a comprometer confidencialidade e autenticidade de forma ampla e sistêmica. A CVE mais perigosa ativa no momento é CVE-2018-1217, com score EPSS de 0,4664, sinalizando probabilidade relevante de exploração e merecendo atenção prioritária mesmo sem registro formal de exploração ativa.

CVE-2018-1217—Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1EPSS 46.6%CVE-2018-1235—Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability.EPSS 42.9%CVE-2018-1189—Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affeEPSS 28.2%CVE-2018-1247—RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerability. This could potentiEPSS 16.4%CVE-2018-1218—In Dell EMC NetWorker versions prior to 9.2.1.1, versions prior to 9.1.1.6, 9.0.x, and versions prior to 8.2.4.11, the 'nsrd' daemon causes EPSS 13.7%CVE-2018-11066—Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution VulnerabilityEPSS 9.9%CVE-2017-10955HIGHThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. AutheEPSS 6.7%CVE-2017-8023CRITICALEMC Networker Remote Code Execution VulnerabilityEPSS 5.9%CVE-2018-15764CRITICALDell EMC ESRS Policy Manager versions 6.8 and prior contain a remote code execution vulnerability due to improper configurations of triggereEPSS 5.3%CVE-2018-11061CRITICALRSA NetWitness Platform versions prior to 11.1.0.2 and RSA Security Analytics versions prior to 10.6.6 are vulnerable to a server-side templEPSS 5.0%CVE-2018-1212HIGHAuthenticated remote code execution in iDRAC 6EPSS 4.3%CVE-2018-11052CRITICALDell EMC ECS S3 Authentication Bypass VulnerabilityEPSS 4.2%CVE-2019-3705HIGHBuffer Overflow VulnerabilityEPSS 4.2%CVE-2019-3722HIGHXML External Entity (XXE) Injection VulnerabilityEPSS 3.8%CVE-2019-3720MEDIUMDirectory Traversal VulnerabilityEPSS 3.5%CVE-2018-1244HIGHiDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent.EPSS 3.5%CVE-2018-1239—Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities. EPSS 3.4%CVE-2019-3707HIGHWS-MAN Authentication Bypass VulnerabilityEPSS 3.3%CVE-2019-3706HIGHWeb Interface Authentication Bypass VulnerabilityEPSS 3.3%CVE-2018-1211—Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be uEPSS 3.3%