XXE in Dell Emc_smis
CVE-2018-1183
In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, Dell EMC VASA Provider Virtual Appliance versions prior to 8.4.0.512, Dell EMC SMIS version…
Vulnerability class: XXE (XML External Entity)
EPSS: 0.021 (79.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Dell Emc_smis
- Dell Emc_solutions_enabler_virtual_appliance
- Dell Emc_unisphere
- Dell Emc_unity_operating_environment
- Dell Emc_vasa_provider_virtual_appliance
- Dell Emc_vipr_srm — versions 3.7, 3.7.1, 3.7.2
- Dell Emc_vmax_embedded_management
- Dell Emc_vmax_enas — versions 8.0, 8.0.1
- Dell Emc_vnx1_operating_environment — versions 05.32.000.5.225, 7.1.82.0
- Dell Emc_vnx2_operating_environment
Weakness classification (CWE)
References
- security_alert@emc.com (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory)
- security_alert@emc.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2018-1183?
- CVE-2018-1183 is a critical-severity vulnerability in Dell Emc_smis, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 9.8/10. Published 2018-04-30.
- How severe is CVE-2018-1183?
- Critical severity. CVSS v3 base score is 9.8 out of 10.