Dell RecoverPoint for Virtual Machines Vulnerable to Brute Force Attacks

CVE-2024-22425

Summary

Dell RecoverPoint for Virtual Machines versions 5.3.x and 6.0.SP1 are susceptible to a vulnerability that allows unauthenticated remote attackers to carry out brute force or dictionary attacks against the RecoverPoint login interface. This security flaw could enable attackers to systematically attempt to guess the passwords of legitimate users, posing significant risks to the integrity and confidentiality of user accounts. Effective measures should be considered to safeguard against unauthorized access attempts.

References