Skip to main content

Disk Backup CVE-2018-11149

HIGH
OS Command Injection (CWE-78)
2018-06-02 cve@mitre.org
Command Injection Disk Backup
8.8
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
8.8 HIGH
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Jun 02, 2018 - 01:29 nvd
HIGH 8.8

DescriptionNVD

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46).

AnalysisAI

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as OS Command Injection (CWE-78), which allows attackers to execute arbitrary operating system commands on the host. Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46). Affected products include: Quest Disk Backup. Version information: before 4.0.3.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Avoid passing user input to shell commands. Use language-specific APIs instead of shell execution. Apply strict input validation with allowlists.

More in Disk Backup

View all
CVE-2018-11143 CRITICAL
9.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46). Rated critical sev
CVE-2018-11194 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6). Rated high sever
CVE-2018-11193 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6). Rated high sever
CVE-2018-11192 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6). Rated high sever
CVE-2018-11191 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6). Rated high sever
CVE-2018-11190 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6). Rated high sever
CVE-2018-11189 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6). Rated high sever
CVE-2018-11188 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46). Rated high severi
CVE-2018-11187 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46). Rated high severi
CVE-2018-11186 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46). Rated high severi
CVE-2018-11185 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46). Rated high severi
CVE-2018-11183 HIGH
8.8 Jun 02

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46). Rated high severi

Same weakness CWE-78 – OS Command Injection

View all
CVE-2014-6271 CRITICAL POC
9.8
CVE-2014-6278 HIGH POC
8.8
CVE-2017-6334 HIGH POC
8.8
CVE-2024-50603 CRITICAL POC
10.0
CVE-2025-64328 HIGH POC
8.6
CVE-2014-7169 CRITICAL POC
9.8
CVE-2017-6884 HIGH POC
8.8
CVE-2017-6077 CRITICAL POC
9.8

Same technique Command Injection

View all
CVE-2012-1823 CRITICAL POC
9.8
CVE-2016-1555 CRITICAL POC
9.8
CVE-2014-6271 CRITICAL POC
9.8
CVE-2015-2051 HIGH POC
8.8
CVE-2014-6278 HIGH POC
8.8
CVE-2017-6334 HIGH POC
8.8
CVE-2024-50603 CRITICAL POC
10.0
CVE-2025-64328 HIGH POC
8.6

Share

CVE-2018-11149 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy