High severity7.8NVD Advisory· Published Oct 5, 2018· Updated Jun 17, 2026

CVE-2018-11064

Description

Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result in arbitrary code execution with elevated privileges. No user file systems are directly affected by this vulnerability.

Affected products

Dell/Emc Unity Operating Environment
cpe:2.3:a:dell:emc_unity_operating_environment:*:*:*:*:*:*:*:*
Range: >=4.3.0.1522077968,<=4.3.1.1525703027
Dell/Emc Unityvsa Operating Environment
cpe:2.3:a:dell:emc_unityvsa_operating_environment:*:*:*:*:*:*:*:*
Range: >=4.3.0.1522077968,<=4.3.1.1525703027
EMC Corporation/Unity OEllm-create
Range: 4.3.0.x, 4.3.1.x
Dell/UnityVSAllm-fuzzy2 versions
4.3.0.x, 4.3.1.x+ 1 more
- (no CPE)range: 4.3.0.x, 4.3.1.x
- (no CPE)range: 4.3.0.x
Dell/EMC Unitycpe-rescue
Range: 4.3.0.x

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105447nvdThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2018/Sep/55nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000