CVE-2016-8216 — Command Injection in Dell EMC Data Domain OS

CWE-2643 documents3 sources
Severity
6.7MEDIUMNVD
EPSS
0.2%
top 59.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell EMC Data Domain OS
Timeline
PublishedFeb 3
Latest updateMay 13

Description

EMC Data Domain OS (DD OS) 5.4 all versions, EMC Data Domain OS (DD OS) 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS (DD OS) 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS (DD OS) 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could potentially be exploited by malicious users to compromise the affected system.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages1 packages

▶NVDdell/emc_data_domain_os4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-vj3f-jxv4-qrgv: EMC Data Domain OS (DD OS) 5↗2022-05-13
▶
CVEList
CVE-2016-8216: EMC Data Domain OS (DD OS) 5↗2017-02-03
▶
CVE-2016-8216 — Command Injection in Dell | cvebase