Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM component APIs that could lead to manipulation of passwords and execution of malicious commands on ACM component.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
dell emc integrated data protection appliance 2.0 |
||
dell emc integrated data protection appliance 2.1 |
||
dell emc integrated data protection appliance 2.2 |
||
dell emc integrated data protection appliance 2.3 |
||
dell emc integrated data protection appliance 2.4 |
Vulmon