6.5
Medium
CVE-2024-22425 Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability
Description
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to launch a brute force attack or a dictionary attack against the RecoverPoint login form. This allows attackers to brute-force the password of valid users in an automated manner.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RecoverPoint for VMs | 6.0.SP1 | No fix stated |
| recoverpoint_for_virtual_machines | 6.0.SP1 | No fix stated |
| recoverpoint_for_virtual_machines 5.3 | 5.3SP2P1 → 5.3SP2 | No fix stated |
Other CVEs of RecoverPoint for VMs
The 4 CVEs of RecoverPoint for VMs →
CVE-2025-21105
Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability
6.6
Medium
CVE-2025-21106
Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability
5.5
Medium
CVE-2024-22426
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability
7.2
High