CVE-2024-38488
6.5MEDIUM
Key Information
- Vendor
- Dell
- Status
- Recoverpoint For Virtual Machines
- Vendor
- CVE Published:
- 13 December 2024
Summary
Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login form and a complete system compromise. This allows attackers to brute-force the password of valid users in an automated manner.
Affected Version(s)
RecoverPoint for Virtual Machines = 6.0 SP1
RecoverPoint for Virtual Machines = 6.0 SP1 P1
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database