A vulnerability was found in Dell EMC Secure Remote Services up to 3.32.00.07. It has been rated as problematic. Affected by this issue is an unknown functionality of the component File Permission. The manipulation as part of a Configuration File leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-264. Impacted is confidentiality. CVE summarizes:

Dell EMC Secure Remote Services, versions prior to 3.32.00.08, contains Improper File Permission Vulnerabilities. The application contains multiple configuration files with world-readable permissions that could allow an authenticated malicious user to utilize the file contents to potentially elevate their privileges.

The bug was discovered 10/15/2018. The weakness was released 10/18/2018 with Dell as not defined mailinglist post (Full-Disclosure). The advisory is shared for download at seclists.org. This vulnerability is handled as CVE-2018-11080 since 05/14/2018. The attack needs to be approached locally. The successful exploitation needs a simple authentication. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1068.

The vulnerability was handled as a non-public zero-day exploit for at least 3 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 3.32.00.08 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 105694†). Entries connected to this vulnerability are available at VDB-125755 and VDB-125775.

Productinfo

Vendor

• Dell EMC

Name

• Secure Remote Services

Version

• 3.32.00.07

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion