CVE-2018-1238

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Dell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light Installation Agent (LIA). This component is used for central management of ScaleIO deployment and uses shell commands for certain actions. A remote malicious user, with network access to LIA and knowledge of the LIA administrative password, could potentially exploit this vulnerability to run arbitrary commands as root on the systems where LIAs are installed.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Mar 27, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-123815.3Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are CVE-2018-123825.3The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before CVE-2018-123835.5If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible CVE-2018-123845.9When handling a SSLv2-compatible ClientHello request, the server doesn't generate a new random value but sends an all-zero value instead. Th CVE-2018-123857.0A potentially exploitable crash in TransportSecurityInfo used for SSL can be triggered by data stored in the local cache in the user profile CVE-2018-123868.1A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to rem CVE-2018-123879.1A vulnerability where the JavaScript JIT compiler inlines Array.prototype.push with multiple arguments that results in the stack pointer bei CVE-2018-123888.8Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory cor CVE-2018-123898.8Mozilla developers and community members reported memory safety bugs present in Firefox ESR 60.2. Some of these bugs showed evidence of memo CVE-2018-12397.2Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities. CVE-2018-123909.8Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some of these bugs showed e CVE-2018-123918.8During HTTP Live Stream playback on Firefox for Android, audio data can be accessed across origins in violation of security policies. Becaus