Skip to content
OpenAdvisories
Medium · 6.6 CVE-2025-21105 EUVD-2025-4604GHSA-r29w-ffc3-h4rm

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access …

Published Feb 20, 2025 · Updated Feb 20, 2025 · Assigned by dell

Description

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down the server, modifying the configuration leading to gain access to unauthorized data.

Affected products

VendorProductAffectedFixed
Dell RecoverPoint for VMs 6.0 SP1, 6.0 SP1 P1, 6.0 SP1 P2 —

References