CVE-2019-3727: OS command injection vulnerability
Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may potentially be able to execute arbitrary commands as root.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3727?
CVE-2019-3727 is classified as a high severity vulnerability due to the potential for arbitrary command execution as root.
How do I fix CVE-2019-3727?
To mitigate CVE-2019-3727, update Dell EMC RecoverPoint to version 5.1.3 or later, and RecoverPoint for VMs to version 5.2.0.2 or later.
What types of systems are affected by CVE-2019-3727?
CVE-2019-3727 affects Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2.
Who can exploit CVE-2019-3727?
A malicious boxmgmt user with access to the installation feature can exploit CVE-2019-3727 to execute arbitrary commands.
What impact does CVE-2019-3727 have on organization security?
CVE-2019-3727 can lead to unauthorized access and control over the affected systems, posing a significant risk to organizational security.