Dell EMC RecoverPoint CVE-2019-3727 Local OS Command Injection Vulnerability

Bugtraq ID:	108411
Class:	Unknown
CVE:	CVE-2019-3727
Remote:	No
Local:	Yes
Published:	May 14 2019 12:00AM
Updated:	May 14 2019 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Dell EMC RecoverPoint for Virtual Machines 5.1.1 Dell EMC RecoverPoint for Virtual Machines 5.1.1.3 Dell EMC RecoverPoint for Virtual Machines 5.1.1.2 Dell EMC RecoverPoint for Virtual Machines 5.1 Dell EMC RecoverPoint 5.1.2 Dell EMC RecoverPoint 5.1.2.1 Dell EMC RecoverPoint 5.1.0.1 Dell EMC RecoverPoint 5.1
Not Vulnerable:	Dell EMC RecoverPoint for Virtual Machines 5.2.0.2 Dell EMC RecoverPoint 5.1.3

Dell EMC RecoverPoint CVE-2019-3727 Local OS Command Injection Vulnerability

Dell EMC RecoverPoint is prone to a local OS command-injection vulnerability.

An attacker may exploit this issue to inject and execute arbitrary commands with root privileges.

Dell EMC RecoverPoint prior to 5.1.3 and RecoverPoint for VMs prior to 5.2.0.2 are vulnerable.

Dell EMC RecoverPoint CVE-2019-3727 Local OS Command Injection Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Dell EMC RecoverPoint CVE-2019-3727 Local OS Command Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Dell EMC RecoverPoint CVE-2019-3727 Local OS Command Injection Vulnerability

References:

• Dell Homepage (Dell)
  
• DSA-2019-078: Dell EMC RecoverPoint OS Command Injection Vulnerability (Dell)