{"id":"CVE-2018-11077","aliases":["EUVD-2018-3121","GHSA-53fw-rm7m-jqgv"],"status":"published","title":"Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability","description":"'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.","severity":{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01005,"percentile":0.6323,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2018-11-26T20:00:00Z","modified":"2026-06-17T01:35:13Z","products":[{"vendor":"dell","product":"avamar"},{"vendor":"dell","product":"emc_avamar"},{"vendor":"dell","product":"emc_integrated_data_protection_appliance"},{"vendor":"dell","product":"integrated data protection appliance"},{"vendor":"dell emc","product":"avamar"},{"vendor":"dell emc","product":"integrated data protection appliance"},{"vendor":"vmware","product":"vsphere_data_protection"}],"references":[{"url":"https://www.vmware.com/security/advisories/VMSA-2018-0029.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory"]},{"url":"https://seclists.org/fulldisclosure/2018/Nov/51","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/105971","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1042153","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-11077"},{"url":"https://github.com/advisories/GHSA-53fw-rm7m-jqgv"}],"sources":{"cve":[{"id":"CVE-2018-11077","title":"Dell EMC Avamar and Integrated Data Protection Appliance Command Injection Vulnerability","description":"'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.","status":"published","published":"2018-11-26T20:00:00Z","modified":"2024-09-17T03:06:58.66Z","updated_at":"2026-11-02T14:35:09.570381Z"}],"euvd":[{"id":"EUVD-2018-3121","description":"'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.","status":"published","published":"2018-11-26T20:00:00Z","modified":"2024-09-17T03:06:58Z","updated_at":"2026-11-03T00:28:34.673232Z"}],"ghsa":[{"id":"GHSA-53fw-rm7m-jqgv","title":"'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7...","description":"'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.","status":"published","published":"2022-05-14T01:44:11Z","modified":"2023-02-02T05:04:26Z","cvss":[{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:51:52.184259Z"}],"nvd":[{"id":"CVE-2018-11077","description":"'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance (IDPA) versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially be able to execute arbitrary commands under root privilege.","status":"published","published":"2018-11-26T20:29:00.42Z","modified":"2026-06-17T01:35:13.54Z","cvss":[{"version":"3.0","score":6.7,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:04:48.987926Z"}]}}