CVE-2016-6649
MediumCVSS 6.7Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 contain multiple command injection vulnerabilities. A malicious administrator with configuration privileges may bypass the user interface and escalate privileges to root.
Risk Assessment
The risk involves privilege escalation by a privileged administrator, potentially leading to full system compromise and unauthorized access to critical data.
Recommendation
Immediately update EMC RecoverPoint to version 4.4.1.1 or later, and EMC RecoverPoint for Virtual Machines to version 5.0 or later.
Original NVD description (English source)
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root.