Path Traversal in Dell EMC Data Protection Advisor
CVE-2016-8211
EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a path traversal vulnerability that may potentially be exploited by malicious users to compromise the affected system.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.030 (85.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Dell Emc_data_protection_advisor — versions 6.1, 6.2, 6.2.1
- N/a Emc Data Protection Advisor 6.1.x, 6.2, 6.2.1, 6.2.2, 6.2.3 Prior To Patch 446 — versions EMC Data Protection Advisor EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_CONFIRM, Mailing List, VDB Entry, Third Party Advisory)
- security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2016-8211?
- CVE-2016-8211 is a high-severity vulnerability in Dell EMC Data Protection Advisor, classified under Path Traversal. CVSS score: 7.5/10. Published 2017-02-03.
- How severe is CVE-2016-8211?
- High severity. CVSS v3 base score is 7.5 out of 10.