CVE:CVE-2018-1183
CNNVD:CNNVD-201805-031
Dell EMC Unisphere for VMAX Virtual Appliance等都是美国戴尔（Dell）公司的产品。Dell EMC Unisphere for VMAX Virtual Appliance（vApp）是一款针对VMAX存储阵列的管理工具。EMC Solutions Enabler Virtual Appliance是一款解决方案应用虚拟设备。
多款Dell产品中的ECOM存在XML外部实体注入漏洞。攻击者可利用该漏洞获取含有敏感信息文件的未授权访问权限或造成拒绝服务。以下产品和版本受到影响：Dell EMC Unisphere for VMAX Virtual Appliance 8.4.0.8之前版本；Dell EMC Solutions Enabler Virtual Appliance 8.4.0.8之前版本；Dell EMC VASA Provider Virtual Appliance 8.4.0.512之前版本；Dell EMC SMIS 8.4.0.6之前版本；Dell EMC VMAX Embedded Management (eManagement) 1.4.0.347及之前版本；Dell EMC VNX2 Operating Environment (OE) for File 8.1.9.231之前版本；Dell EMC VNX2 Operating Environment (OE) for Block 05.33.009.5.231之前版本；Dell EMC VNX1 Operating Environment (OE) for File 7.1.82.0之前版本；Dell EMC VNX1 Operating Environment (OE) for Block 05.32.000.5.225之前版本；Dell EMC VNXe3200 Operating Environment (OE)；Dell EMC VNXe1600 Operating Environment (OE) 3.1.9.9570228之前版本；Dell EMC VNXe 3100/3150/3300 Operating Environment (OE)；Dell EMC ViPR SRM 3.7版本，3.7.1版本，3.7.2版本(仅影响使用了Dell EMC Host Interface for Windows的产品)；Dell EMC ViPR SRM 4.0版本，4.0.1版本，4.0.2版本，4.0.3版本(仅影响使用了Dell EMC Host Interface for Windows的产品)；Dell EMC XtremIO 4.x版本；Dell EMC VMAX eNAS 8.x版本；Dell EMC Unity Operating Environment (OE) 4.3.0.1522077968之前版本。
solution:Upgrade dell emc_smis to a higher version than 8.4.0.6,and avoid the version (,8.4.0.6); Upgrade dell emc_solutions_enabler_virtual_appliance to a higher version than 8.4.0.8,and avoid the version (,8.4.0.8); Upgrade dell emc_unisphere to a higher version than 8.4.0.8,and avoid the version (,8.4.0.8); Upgrade dell emc_unity_operating_environment to a higher version than 4.3.0.1522077968,and avoid the version (,4.3.0.1522077968); Upgrade dell emc_vasa_provider_virtual_appliance to a higher version than 8.4.0.512,and avoid the version (,8.4.0.512); Upgrade dell emc_vipr_srm to a higher version than -,3.7,3.7.1,3.7.2,4.0,4.0.1,4.0.2,4.0.3,and avoid the version 3.7,3.7.1,3.7.2,4.0,4.0.1,4.0.2,4.0.3; Upgrade dell emc_vmax_embedded_management to a higher version than 1.4.0.347,and avoid the version (,1.4.0.347]; Upgrade dell emc_vmax_enas to a higher version than 8.0,8.0.1,and avoid the version 8.0,8.0.1; Upgrade dell emc_vnx1_operating_environment to a higher version than 05.32.000.5.225,7.1.82.0,and avoid the version 05.32.000.5.225,7.1.82.0; Upgrade dell emc_vnx2_operating_environment to a higher version than 05.33.009.5.231,8.1.9.231,and avoid the version (,05.33.009.5.231),(,8.1.9.231); Upgrade dell emc_vnxe_3100_operating_environment to a higher version than -; Upgrade dell emc_vnxe_3150_operating_environment to a higher version than -; Upgrade dell emc_vnxe_3300__operating_environment to a higher version than -; Upgrade dell emc_vnxe1600_operating_environment to a higher version than 3.1.9.9570228,and avoid the version (,3.1.9.9570228); Upgrade dell emc_vnxe3200_operating_environment to a higher version than -; Upgrade dell emc_xtremio to a higher version than 4.0,4.0.2,and avoid the version 4.0,4.0.2