Vulnerability Description
Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may potentially be able to execute arbitrary commands as root.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Recoverpoint | < 5.1.3 |
| Dell | Recoverpoint For Virtual Machines | < 5.2.0.2 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/108411
- https://www.dell.com/support/security/us/en/04/details/533842/DSA-2019-078-Dell-Vendor Advisory
- http://www.securityfocus.com/bid/108411
- https://www.dell.com/support/security/us/en/04/details/533842/DSA-2019-078-Dell-Vendor Advisory
FAQ
What is CVE-2019-3727?
CVE-2019-3727 is a vulnerability with a CVSS score of 6.4 (MEDIUM). Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious b...
How severe is CVE-2019-3727?
CVE-2019-3727 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-3727?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Recoverpoint, Dell Recoverpoint For Virtual Machines.