CVE-2016-6649

Severity: medium (CVSS 6.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-02-03 · updated 2026-07-10
Weakness: CWE-77

Description

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root.

Affected products

Dell RecoverPoint for Virtual Machines: through 4.0
EMC Recoverpoint: through 4.4.1.0

References

http://www.securityfocus.com/archive/1/540058/30/0/threaded
http://www.securityfocus.com/bid/95821
http://www.securitytracker.com/id/1037727
http://www.securityfocus.com/archive/1/540058/30/0/threaded
http://www.securityfocus.com/bid/95821
http://www.securitytracker.com/id/1037727

Get alerted when CVE-2016-6649 or the next vulnerability affects your stack