CVE-2018-1235

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: May 29, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-123536.1Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name field to the "Business Model's Catalogue" catalogue.CVE-2018-123548.8Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form, as demonstrated by a /knowage/restful-services/2.0/analyticalDrivers/ POST requ CVE-2018-123556.1Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or description field to the "Olap Schemas' Catalogue" catalogue.CVE-2018-123569.8An issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2. The signature verification routine parses CVE-2018-123576.5Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions.CVE-2018-123584.3Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malicious site to read res CVE-2018-123598.8A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dynamically, causing da CVE-2018-123608.8A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by focusing that element. CVE-2018-123618.8An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for subsequent graphics c CVE-2018-123628.8An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler, resulting in a CVE-2018-123638.8A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resulting in the old document CVE-2018-123648.8NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin POST that does a 307 r