Medium severity6.4NVD Advisory· Published May 15, 2019· Updated Jun 17, 2026

CVE-2019-3727

Description

Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may potentially be able to execute arbitrary commands as root.

Affected products

Dell/Emc Recoverpoint
cpe:2.3:a:dell:emc_recoverpoint:*:*:*:*:*:*:*:*
Range: <5.1.3
Dell/Recoverpoint For Virtual Machines
cpe:2.3:a:dell:recoverpoint_for_virtual_machines:*:*:*:*:*:*:*:*
Range: <5.2.0.2
Dell/RecoverPointllm-create
Range: <5.1.3
EMC Corporation/RecoverPointllm-create
Range: <5.1.3
Dell/RecoverPoint for VMsllm-fuzzy2 versions
<5.2.0.2+ 1 more
- (no CPE)range: <5.2.0.2
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

www.dell.com/support/security/us/en/04/details/533842/DSA-2019-078-Dell-EMC-RecoverPoint-OS-Command-Injection-VulnerabilitynvdVendor Advisory
www.securityfocus.com/bid/108411nvd

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000