Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-38488 EUVD-2024-37811GHSA-4g8h-jqj8-hf34

Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability wh…

Published Dec 13, 2024 · Updated Dec 13, 2024 · Assigned by dell

Description

Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login form and a complete system compromise.
This allows attackers to brute-force the password of valid users in an automated manner.

Affected products

VendorProductAffectedFixed
Dell RecoverPoint for Virtual Machines 6.0 SP1, 6.0 SP1 P1 —

References