CVE-2019-18582

Estado: ModificadaAlta (7.2)—

Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to inject malicious report generation scripts in the server. This may lead to OS command execution as the regular user runs the DPA service on the affected system.

CVSS

Versión: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Puntuación base: 7.2

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 4.57%
Percentil entre todas las CVEs puntuadas: 91
Fecha de la puntuación: 6/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Impacto principalT1059 Command and Scripting Interpreterexecution

Fuente: mapeo oficial MITRE CTID (CVE → ATT&CK).

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Restrict Web-Based Content Privileged Account Management Limit Software Installation Execution Prevention Behavior Prevention on Endpoint Disable or Remove Feature or Program

Tecnologías afectadas (2)

Dell — EMC Data Protection Advisor Dell — EMC Integrated Data Protection Appliance Firmware

CWE

CWE-94
CWE-94

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2019-18582",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security_alert@emc.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.0",
          "baseScore": 9.1,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2.3
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.2,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "Data Protection Advisor",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "6.3, 6.4, 6.5 and version prior to 18.2 patch 83 and prior to 19.1 patch 71",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2020-03-18T19:15:16.623",
  "references": [
    {
      "url": "https://www.dell.com/support/security/en-us/details/539430/DSA-2019-155-Dell-EMC-Data-Protection-Advisor-Security-Update-for-Multiple-Vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://www.dell.com/support/security/en-us/details/539430/DSA-2019-155-Dell-EMC-Data-Protection-Advisor-Security-Update-for-Multiple-Vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security_alert@emc.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server-side template injection vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to inject malicious report generation scripts in the server. This may lead to OS command execution as the regular user runs the DPA service on the affected system."
    },
    {
      "lang": "es",
      "value": "Dell EMC Data Protection Advisor versiones 6.3, 6.4, 6.5, 18.2 anteriores al parche 83 y las versiones 19.1 anteriores al parche 71, contiene una vulnerabilidad de inyección de plantilla del lado del servidor en la API REST. Un usuario malicioso autenticado remoto con privilegios administrativos puede explotar esta vulnerabilidad para inyectar scripts de generación de reportes maliciosos en el servidor. Esto puede conllevar a una ejecución de comando de Sistema Operativo ya que el usuario regular ejecuta el servicio DPA en el sistema afectado."
    }
  ],
  "lastModified": "2026-06-17T02:25:08.330",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:dell:emc_data_protection_advisor:6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A98B199D-3590-43AD-B3DD-3832E0B1CDF8"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_data_protection_advisor:6.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EB4A43EE-2F9D-43C0-B8C8-CB231ECEE3E1"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_data_protection_advisor:6.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "669875C4-F354-4F36-A7F1-404BAC90276E"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_data_protection_advisor:18.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F0DE2A8-C1FD-4A04-B8D2-719DB7997A3C"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_data_protection_advisor:18.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A646666-BCCF-4D74-B8F9-802D8E3F4F8B"
            },
            {
              "criteria": "cpe:2.3:a:dell:emc_data_protection_advisor:19.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "84DA2D60-38CF-40EE-875C-8DF7FCFC17AB"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_integrated_data_protection_appliance_firmware:2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C133A08-973B-43E2-8E0C-9B7AEF467BDD"
            },
            {
              "criteria": "cpe:2.3:o:dell:emc_integrated_data_protection_appliance_firmware:2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "889D0DDB-7D31-4AE9-972A-AE14CC2A82BF"
            },
            {
              "criteria": "cpe:2.3:o:dell:emc_integrated_data_protection_appliance_firmware:2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "970D60B9-9DAD-4F1D-BFBE-BB069756011C"
            },
            {
              "criteria": "cpe:2.3:o:dell:emc_integrated_data_protection_appliance_firmware:2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1335A62E-B8AB-4D72-A8CE-D2E79EFC42A3"
            },
            {
              "criteria": "cpe:2.3:o:dell:emc_integrated_data_protection_appliance_firmware:2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7B70F149-1646-4D04-A693-A6263011540D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_idpa_dp4400:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "70B89DD8-CEE9-4C3D-828D-71139D55A7C5"
            },
            {
              "criteria": "cpe:2.3:h:dell:emc_idpa_dp5800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7FEEA32E-07CD-45F0-AB1E-235764A8A094"
            },
            {
              "criteria": "cpe:2.3:h:dell:emc_idpa_dp8300:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8C8B35A8-80BF-443E-992B-6F5B03A9928C"
            },
            {
              "criteria": "cpe:2.3:h:dell:emc_idpa_dp8800:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E98F97BD-57F5-4F2E-9573-863503A5B911"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}