CVE-2018-1239 Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities. A remote application admin user could potentially exploit th...
HighCVSS 7.2
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities. A remote application admin user could potentially exploit the vulnerabilities to execute arbitrary OS commands as system root on the system where Dell EMC Unity is installed.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell emc unity operating environment | < 4.3.0.1522077968 | 4.3.0.1522077968 |
| Dell emc unityvsa operating environment | < 4.3.0.1522077968 | 4.3.0.1522077968 |
| Dell EMC Unity Operating Environment (OE) | = versions prior to 4.3.0.1522077968 | No fix listed |
References
- 20180503 DSA-2018-063: Dell EMC Unity Family OS Command Injection Vulnerability mailing-list third-party-advisory
- 104092 third-party-advisory vdb-entry