Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-22426

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerabilit

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user, resulting in a complete system compromise.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell RecoverPoint for VMs

Default version status: unaffected

  • 5.3 SP2affected
  • 5.3 SP2 P1affected
  • 5.3 SP2 P2affected
  • 5.3 SP2 P4affected
  • 5.3 SP3 P1affected
  • 5.3 SP3 P2affected
  • 6.0.SP1affected

References