CVE-2026-23501: Improper Neutralization of Special Elements used in an OS Command

Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-28980: Use of a Broken or Risky Cryptographic Algorithm

Dell RecoverPoint for VMs, versions 6.0.x contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

Command injection

Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may potentially be able to execute arbitrary commands as root...

PT-2019-16671

Name of the Vulnerable Software and Affected Versions Dell EMC RecoverPoint versions prior to 5.1.3 Dell EMC RecoverPoint for VMs versions prior to 5.2.0.2 Description The issue concerns an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious boxmgmt user may...

Denial of service

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the...

CVE-2018-15771

Dell EMC RecoverPoint and RecoverPoint for VMs are affected by an information-disclosure vulnerability in versions before 5.1.2.1 and 5.2.0.2 respectively. The issue arises when a boxmgmt user can use the Boxmgmt CLI to determine the existence of system files, enabling local information disclosur...

PT-2018-13196

Name of the Vulnerable Software and Affected Versions Dell EMC RecoverPoint versions prior to 5.1.2.1 Dell EMC RecoverPoint for VMs versions prior to 5.2.0.2 Description The issue allows a malicious boxmgmt user to potentially consume a large amount of CPU bandwidth, making the system slow. It ma...

CVE-2018-15772: Uncontrolled Resource Consumption

Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the...

CVE-2018-1242

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contains a command injection vulnerability in the Boxmgmt CLI. An authenticated malicious user with boxmgmt privileges may potentially exploit this vulnerability to read RPA files. Note that files th...

CVE-2018-1235

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege...

CVE-2018-1235

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command injection vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to execute arbitrary commands on the affected system with root privilege...

CVE-2018-1241

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP...

PT-2018-11150

Name of the Vulnerable Software and Affected Versions Dell EMC RecoverPoint versions prior to 5.1.2 Dell EMC RecoverPoint for VMs versions prior to 5.1.1.3 Description The issue may cause an LDAP password to be leaked in plain-text into the log file under certain conditions. An authenticated...

PT-2018-11158

Name of the Vulnerable Software and Affected Versions Dell EMC RecoverPoint versions prior to 5.1.2 Dell EMC RecoverPoint for VMs versions prior to 5.1.1.3 Description The issue concerns a command injection vulnerability in the Boxmgmt CLI. An authenticated malicious user with boxmgmt privileges...

CVE-2018-1241: Insertion of Sensitive Information into Log File

Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, under certain conditions, may leak LDAP password in plain-text into the RecoverPoint log file. An authenticated malicious user with access to the RecoverPoint log files may obtain the exposed LDAP...