DB: Dell OpenManage Network Manager MySQL Improper Access Control Command Execution
This signature detects attempts to exploit a known vulnerability against Dell OpenManage Network Manager MySQL. A successful attack can lead to arbitrary command execution.
Extended Description
Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database.
Affected Products
Dell openmanage_network_manager
Short Name
DB:MYSQL:CVE-2018-15768-CE
Severity
Major
Recommended
True
Recommended Action
Drop
Category
DB
Keywords
Access CVE-2018-15768 Command Control Dell Execution Improper Manager MySQL Network OpenManage
Release Date
12/06/2018
Supported Platforms
mx-19.3
vmx-19.3
vsrx-19.2
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vmx-19.4
mx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
mx-12.3
srx-12.3
srx-branch-12.3
vsrx-12.3
Sigpack Version
3665
False Positive
Unknown
Vendors
Dell
CVSS Score
4.0