Skip to content
6.5 Medium

CVE-2024-22425 Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability

Description

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to launch a brute force attack or a dictionary attack against the RecoverPoint login form. This allows attackers to brute-force the password of valid users in an automated manner.

Affected products and versions

Product Affected versions Fixed in
RecoverPoint for VMs 6.0.SP1 No fix stated
recoverpoint_for_virtual_machines 6.0.SP1 No fix stated
recoverpoint_for_virtual_machines 5.3 5.3SP2P1 → 5.3SP2 No fix stated
The 4 CVEs of RecoverPoint for VMs →
Track this CVE