CVE-2016-6649
Medium
Description
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root.
SeverityMedium
CVSS6.7
Exploit probability—
ProductDell Recoverpoint For Virtual Machines
PublishedFeb 3, 2017
First seenFeb 3, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell recoverpoint_for_virtual_machines | v ≤ 4.0 | — |
| emc recoverpoint | v ≤ 4.4.1.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.