CVE-2018-11064

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-10-05 · updated 2026-06-17
Weakness: CWE-732

Description

Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result in arbitrary code execution with elevated privileges. No user file systems are directly affected by this vulnerability.

Affected products

Dell Emc Unity Operating Environment: from 4.3.0.1522077968 through 4.3.1.1525703027
Dell Emc Unityvsa Operating Environment: from 4.3.0.1522077968 through 4.3.1.1525703027

References

http://www.securityfocus.com/bid/105447
https://seclists.org/fulldisclosure/2018/Sep/55
http://www.securityfocus.com/bid/105447
https://seclists.org/fulldisclosure/2018/Sep/55

Get alerted when CVE-2018-11064 or the next vulnerability affects your stack