CVE-2018-11189

Vulnerability

Quest DR Series Disk Backup software versions prior to 4.0.3.1 are affected by a privilege escalation vulnerability (issue 1 of 6). The exact mechanism is not detailed in the available references, but the flaw allows an attacker to escalate privileges within the system.

Exploitation

Based on the reference [1], which describes a code execution vulnerability in version 4.0.3, an attacker with network access could exploit the vulnerability. The reference indicates that the exploit is publicly available for version 4.0.3, suggesting that exploitation requires no authentication and can be performed remotely.

Impact

Successful exploitation leads to code execution with elevated privileges. An attacker can gain full control over the affected system, potentially compromising confidentiality, integrity, and availability of data.

Mitigation

Quest DR Series Disk Backup software version 4.0.3.1 addresses this vulnerability. Users should upgrade to version 4.0.3.1 or later immediately. No workarounds are documented in the provided references.