Apache Struts 2 Remote Code Execution Vulnerability (CVE-2018-11776)

Summary: Find information about Apache Struts 2 Remote Code Execution Vulnerability (CVE-2018-11776) and impacted products.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

See Resolution Section.

Cause

See Resolution Section.

Resolution

On August 22, 2018, Apache Software Foundation disclosed a vulnerability in Apache Struts 2 that could allow an attacker to execute arbitrary commands remotely on affected systems . For more information on this vulnerability, please review the Apache security advisory (S2-057).

Dell is aware of and has investigated the impact of this vulnerability on our products.

  • Dell PCs and Thin Client products: No impact
  • Dell EMC PowerEdge Servers: No impact
  • Dell Storage (SC Series, PS Series, and PowerVault MD Series): Investigating
  • Dell EMC Storage, Data Protection, and Converged Infrastructure products: For impacted products, see here.
  • RSA products: For impacted products, see here.
  • Dell EMC Networking Products: No impact
Article Properties
Article Number: 000175629
Article Type: Solution
Last Modified: 18 Aug 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.