Strix
26.1K

CVE-2019-3737

HIGHCVSS 7.5/10EPSS 1.78%

Last modified

CVE-2019-3737 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application.. EPSS estimates a 1.78% chance of exploitation in the next 30 days.

Description

Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
1.78%

75.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
DellAvamar Data Migration Enabler Web Interface1.0.50
DellAvamar Data Migration Enabler Web Interface1.0.51

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2019-3737?
Dell EMC Avamar ADMe Web Interface 1.0.50 and 1.0.51 are affected by an LFI vulnerability which may allow a malicious user to download arbitrary files from the affected system by sending a specially crafted request to the Web Interface application.
How severe is CVE-2019-3737?
CVE-2019-3737 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 1.78% probability of exploitation in the next 30 days.
How do I fix CVE-2019-3737?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2019-3737?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST