CVE-2016-6649

—

CVSS 3.0

6.7 medium

EPSS

<1%p57

Published

Feb 3, 2017 (Feb 3, 2017)

Modified

Jul 10, 2026

Description

EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privileges may bypass the user interface and escalate his privileges to root.

Vendors: dell emc
Products: recoverpoint for virtual machines, recoverpoint
Weakness: CWE-77
Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.