CVE-2018-11187

Vulnerability

Quest DR Series Disk Backup software versions prior to 4.0.3.1 contain a command injection vulnerability (issue 45 of 46). The vulnerability exists in the management interface, where insufficient input validation allows an attacker to inject arbitrary operating system commands. [1]

Exploitation

An attacker must have network access to the management interface of the Quest DR Series appliance. No authentication is required if the interface is exposed; the attacker crafts a special HTTP request containing the injected commands. The request is processed by the vulnerable component, leading to command execution. [1]

Impact

Successful exploitation allows the attacker to execute arbitrary commands on the underlying operating system with the privileges of the affected service. This can lead to full system compromise, including data disclosure, modification, or disruption of backup services. [1]

Mitigation

Quest has released version 4.0.3.1 to address this vulnerability. Users should upgrade to version 4.0.3.1 or later. If upgrading is not immediately possible, restrict network access to the management interface to trusted hosts only. [1]