CVE-2016-8216
EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10…
Does this matter?
Lower severity and a low EPSS score (0.77%). Track it; it rarely justifies an emergency change on its own.
Description
EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could potentially be exploited by malicious users to compromise the affected system.
- CVSS 3.1
- 6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.77% probability · 53th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- dell/emc data domain os
- Source
- security_alert@emc.com
References
- http://www.securityfocus.com/archive/1/540059/30/0/threadedMailing List, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/95829Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037728Third Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/540059/30/0/threadedMailing List, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/95829Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1037728Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.