What’s Vulnerable › Vulnerabilities

CVE-2018-15771: Dell EMC RecoverPoint Information Disclosure Vulnerability

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-11-13 · updated 2026-06-17
• Weakness: CWE-200

Description

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.

Affected products

• EMC Recoverpoint: before 5.1.2.1 — fixed in 5.1.2.1
• EMC Recoverpoint For Virtual Machines: before 5.2.0.2 — fixed in 5.2.0.2

How to fix

Upgrade to a fixed version: EMC Recoverpoint 5.1.2.1; EMC Recoverpoint For Virtual Machines 5.2.0.2. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/105916
• http://www.securitytracker.com/id/1042059
• https://seclists.org/fulldisclosure/2018/Nov/34
• http://www.securityfocus.com/bid/105916
• http://www.securitytracker.com/id/1042059
• https://seclists.org/fulldisclosure/2018/Nov/34

Get alerted when CVE-2018-15771 or the next vulnerability affects your stack