| Package | Affected versions | Patched versions |
|---|---|---|
| emc recoverpoint | < 5.1.3 | 5.1.3 |
| recoverpoint for virtual machines | < 5.2.0.2 | 5.2.0.2 |
Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may potentially be able to execute arbitrary commands as root.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free