CVE-2016-6649 in RecoverPointinfo

Summary

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

08/10/2016

Disclosure

02/03/2017

Entries

1

CPE

ready

CWE

CWE-77

CVSS

7.3

EPSS

0.00351

CTI

0.00

Sources

Interested in the pricing of exploits?

See the underground prices here!