7.2
High
CVE-2024-22426 Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability
Description
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user, resulting in a complete system compromise.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RecoverPoint for VMs | 6.0.SP1 | No fix stated |
| recoverpoint_for_virtual_machines | Versions not published |
Other CVEs of RecoverPoint for VMs
The 4 CVEs of RecoverPoint for VMs →
CVE-2025-21105
Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability
6.6
Medium
CVE-2025-21106
Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability
5.5
Medium
CVE-2024-22425
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability
6.5
Medium