CVE-2016-6649
MEDIUMEMC RecoverPoint <4.4.1.1-5.0 - Command Injection
Title source: llmDescription
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root.
Scores
CVSS v3
6.7
EPSS
0.0035
EPSS Percentile
57.2%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-77
Status
published
Affected Products (3)
emc/recoverpoint
< 4.4.1.0
emc/recoverpoint_for_virtual_machines
< 4.0
n/a/EMC RecoverPoint and EMC RecoverPoint for Virtual Machines EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0
< EMC RecoverPoint and EMC RecoverPoint for Virtual Machines EMC RecoverPoint versions before 4.4.1.1
Timeline
Published
Feb 03, 2017
Tracked Since
Feb 18, 2026