CVE-2018-11064: dell emc dell emc unity
Vulnerability summary
CVE-2018-11064 is a high (CVSS 7.8) vulnerability in dell emc dell emc unity. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31.7% of scored vulnerabilities.
Timeline
- 05-10-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result in arbitrary code execution with elevated privileges. No user file systems are directly affected by this vulnerability.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.8HighCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.39%
Chance of exploitation in the next 30 days
Percentile
32%
Versus all other CVEs
30-day change
0.00 pp
From 0.39% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Dell2 products
- emc_unity_operating_environment≥ 4.3.0.1522077968, ≤ 4.3.1.1525703027
- emc_unityvsa_operating_environment≥ 4.3.0.1522077968, ≤ 4.3.1.1525703027
Dell emc2 products
- dell emc unity≥ 4.3.0.x, ≤ 4.3.1.x
- dell emc unityvsa≥ 4.3.0.x, ≤ 4.3.1.x
2 vendors · 4 products