An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC…

Description

An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPoint versions prior to 5.0.1.3. Command injection vulnerability in Admin CLI may allow a malicious user with admin privileges to escape from the restricted shell to an interactive shell and run arbitrary commands with root privileges.

Scores

EPSS (exploitation in 30 days)

6.3% · top 6.4% of all CVEs (4 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.7.

Weakness

• Command injection vulnerability
• CWE-78 (opens in a new tab)All about CWE-78 and its CVEs

Affected products

• EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, EMC RecoverPoint versions prior to 5.0.1.3

  • affected EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, EMC RecoverPoint versions prior to 5.0.1.3

References (3)

• 1040320 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• http://seclists.org/fulldisclosure/2018/Feb/9 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 44614 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2018-1185](https://trackcve.app/badge/CVE-2018-1185.svg)](https://trackcve.app/cve/CVE-2018-1185)

Record last updated 5 Aug 2024, 03:51 UTC.