← Vulnerability feed

Vulnerability record · CVE-2018-11064 · published 5 October 2018

CVE-2018-11064: Dell emc unity operating environment incorrect permission assignment vulnerability

Dell · Emc Unity Operating Environment

Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result in arbitrary code execution with elevated privileges. No user file systems are directly affected by this vulnerability.

7.8 CVSS 3.0 High EPSS 0.39% · top 69.3% CWE-732 · Incorrect permission assignment
7.8CVSS 3.0 base score, v2 4.6
0.39%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result in arbitrary code execution with elevated privileges. No user file systems are directly affected by this vulnerability.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/105447 Third Party AdvisoryVDB Entry
https://seclists.org/fulldisclosure/2018/Sep/55 Mailing ListThird Party Advisory
http://www.securityfocus.com/bid/105447 Third Party AdvisoryVDB Entry
https://seclists.org/fulldisclosure/2018/Sep/55 Mailing ListThird Party Advisory

Track CVE-2018-11064 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-36287Dell emc unity operating environment os command injection vulnerabilityDell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which may lead unauthenticated user…EPSS 2.6%9.8CVE-2021-36294Dell emc unity operating environment vulnerabilityDell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit …EPSS 1.6%9.8CVE-2018-1183Dell emc smis xml external entity (xxe) vulnerabilityIn Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, D…EPSS 2.0%9.1CVE-2021-36288Dell emc unity operating environment path traversal vulnerabilityDell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which may lead unauthenticated users to read/write restrict…EPSS 1.0%7.8CVE-2021-36289Dell emc unity operating environment sensitive information in log file vulnerabilityDell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit t…EPSS 0.24%7.8CVE-2019-3741Dell emc unity operating environment vulnerabilityDell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain a plain-text password storage vulnerability. A Unisphere user’s (including the ad…EPSS 0.34%7.5CVE-2020-5319Dell emc unity operating environment vulnerabilityDell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH …EPSS 1.4%7.2CVE-2021-36295Dell emc unity operating environment os command injection vulnerabilityDell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with pri…EPSS 2.8%

Source: NIST National Vulnerability Database (record CVE-2018-11064), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.