CVE-2018-1235

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege.

• CWE-78

• http://seclists.org/fulldisclosure/2018/May/61Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104246Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44920/Exploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2018/May/61Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/104246Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44920/Exploit, Third Party Advisory, VDB Entry

Published

May 29, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12335Incorrect access control in ECOS System Management Appliance…
• CVE-2018-12336Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka…
• CVE-2018-12337Reliance on Security Through Obscurity vulnerability in ECOS…
• CVE-2018-12338Undocumented Factory Backdoor in ECOS System Management Appl…
• CVE-2018-12339ArticleCMS through 2017-02-19 has XSS via an "add an article…
• CVE-2018-1234RSA Authentication Agent version 8.0.1 and earlier for Web f…
• CVE-2018-12353Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name fie…
• CVE-2018-12354Knowage (formerly SpagoBI) 6.1.1 allows CSRF via every form,…
• CVE-2018-12355Knowage (formerly SpagoBI) 6.1.1 allows XSS via the name or …6.1
• CVE-2018-12356An issue was discovered in password-store.sh in pass in Simp…
• CVE-2018-12357Arista CloudVision Portal through 2018.1.1 has Incorrect Per…
• CVE-2018-12358Service workers can use redirection to avoid the tainting of…