CVE-2018-11066: Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerability

Security readout for executives and security teams

CVE-2018-11066 affects Dell EMC backup infrastructure. An unauthenticated remote attacker could potentially execute arbitrary commands on vulnerable Avamar Server or IDPA systems. Because these platforms protect backup data, compromise could affect recovery capability and sensitive stored data, even though the supplied sources do not provide a severity score. Exposure is limited to environments running the affected Dell EMC Avamar Server or IDPA versions, especially where the relevant Avamar Client Manager service is reachable from untrusted or broad internal networks. Prioritize remediation if affected systems are in production or reachable beyond a tightly controlled admin network. Backup infrastructure compromise can undermine incident recovery and data protection, so this should be handled as a high-priority infrastructure risk. Mitigation focus: Inventory Avamar Server and IDPA versions against the affected version list.; Consult Dell EMC advisory DSA-2018-145 and VMware VMSA-2018-0029 for official fixes.; Apply vendor-recommended updates or remediation after change testing..

Prepared

Jun 6, 2026, 22:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.