CVE-2024-38488

Medium

Description

Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login form and a complete system compromise. This allows attackers to brute-force the password of valid users in an automated manner.

SeverityMedium
CVSS6.5
Exploit probability—
ProductDell Recoverpoint For Virtual Machines
PublishedDec 13, 2024
First seenDec 13, 2024
Weakness typeCWE-307CWE-307

How to fix

Affected products

ProductAffected versionsFixed in
dell recoverpoint_for_virtual_machines6.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.