CVE-2019-3704

Опубликовано: 07 фев. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

VNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command injection vulnerability. Due to inadequate restriction configured in sudores, a local authenticated malicious user could potentially execute arbitrary OS commands as root by exploiting this vulnerability.

Ссылки

http://www.securityfocus.com/bid/106954
Third Party Advisory
https://seclists.org/fulldisclosure/2019/Feb/8
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/106954
Third Party Advisory
https://seclists.org/fulldisclosure/2019/Feb/8
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dell:emc_vnx2_firmware:*:*:*:*:*:*:*:*

Версия до 8.1.9.217 (исключая)

cpe:2.3:h:dell:emc_vnx2:-:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00563

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-78

Связанные уязвимости

GHSA-fcx4-gjw5-4cx6