← Vulnerability feed

Vulnerability record · CVE-2018-11143 · published 2 June 2018

CVE-2018-11143: Quest disk backup os command injection vulnerability

Quest · Disk Backup

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).

9.8 CVSS 3.0 Critical EPSS 37% · top 1.5% CWE-78 · OS command injection
9.8CVSS 3.0 base score, v2 7.5
37%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
6References
17 Jun 2026Last modified by NVD

Description

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46).

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html Third Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2018/May/71 Mailing ListThird Party Advisory
https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities Technical DescriptionThird Party Advisory
http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html Third Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2018/May/71 Mailing ListThird Party Advisory
https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities Technical DescriptionThird Party Advisory

Track CVE-2018-11143 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2018-11175Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46).EPSS 4.5%8.8CVE-2018-11176Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46).EPSS 4.6%8.8CVE-2018-11177Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46).EPSS 4.5%8.8CVE-2018-11178Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46).EPSS 4.5%8.8CVE-2018-11179Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46).EPSS 4.5%8.8CVE-2018-11180Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46).EPSS 4.5%8.8CVE-2018-11181Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46).EPSS 4.5%8.8CVE-2018-11182Quest disk backup os command injection vulnerabilityQuest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46).EPSS 4.5%

Source: NIST National Vulnerability Database (record CVE-2018-11143), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.