CVE-2020-5352

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Advisor versions 6.4 through 6.5 Dell EMC Data Protection Advisor version 18.1

Description The issue allows a remote authenticated malicious user to execute arbitrary commands on the affected system due to an OS command injection vulnerability.

Recommendations For versions 6.4 and 6.5, update to a version that contains a fix for this issue. For version 18.1, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the system to minimize the risk of exploitation.