High severity7.1NVD Advisory· Published Nov 13, 2018· Updated Jun 17, 2026

CVE-2018-15772

Description

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the existence of any system file via Boxmgmt CLI.

Affected products

Dell/Emc Recoverpoint
cpe:2.3:a:dell:emc_recoverpoint:*:*:*:*:*:*:*:*
Range: <5.1.2.1
Dell/Emc Recoverpoint For Virtual Machines
cpe:2.3:a:dell:emc_recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:*
Range: <5.2.0.2
Dell/RecoverPointllm-fuzzy
Range: <5.1.2.1
Dell/RecoverPoint for VMsllm-fuzzy
Range: <5.2.0.2
EMC Corporation/RecoverPointcpe-rescue
Range: unspecified
EMC Corporation/Recoverpoint For Virtual Machinescpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/105916nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1042059nvdThird Party AdvisoryVDB Entry
seclists.org/fulldisclosure/2018/Nov/34nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.461
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000