CVE-2018-1235: dell emc dell emc recoverpoint OS Command Injection
Vulnerability summary
CVE-2018-1235 is a high (CVSS 10.0) OS Command Injection vulnerability in dell emc dell emc recoverpoint. EPSS estimates a 42.20% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 29-05-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
42.20%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
-0.66 pp
From 42.86% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundDell EMC RecoverPoint < 5.1.2 - Local Root Command Execution
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Dell emc2 products
- dell emc recoverpoint≥ unspecified, < 5.1.2
- dell emc recoverpoint virtual machine (vm)≥ unspecified, < 5.1.1.3
Emc2 products
- recoverpoint< 5.1.2
- recoverpoint_for_virtual_machines< 5.1.1.3
2 vendors · 4 products