Improper Authentication Vulnerability in Dell RecoverPoint for Virtual Machines

CVE-2024-38488

What is CVE-2024-38488?

Dell RecoverPoint for Virtual Machines 6.0.x contains an improper restriction of excessive authentication vulnerability. This flaw allows a network attacker to potentially exploit the RecoverPoint login form through automated brute force or dictionary attacks on valid user passwords, which could lead to a complete system compromise. It is critical for users to apply necessary updates and security measures to protect against such vulnerabilities.

References