Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-22425

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vuln

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to launch a brute force attack or a dictionary attack against the RecoverPoint login form. This allows attackers to brute-force the password of valid users in an automated manner.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell RecoverPoint for VMs

Default version status: unaffected

  • 5.3 SP2affected
  • 5.3 SP2 P1affected
  • 5.3 SP2 P2affected
  • 5.3 SP2 P4affected
  • 5.3 SP3 P1affected
  • 5.3 SP3 P2affected
  • 6.0.SP1affected

References