27 matches found
CVE-2026-22769: Use of Hard-coded Credentials
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized...
EUVD-2024-22265
Malicious code in bioql PyPI...
CVE-2025-21105: Improper Access Control
Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down t...
CVE-2025-21106: Incorrect Default Permissions
Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system...
PT-2024-9592
Name of the Vulnerable Software and Affected Versions Dell RecoverPoint for Virtual Machines versions 6.0.x Description The issue is related to an OS Command Injection vulnerability. A low-privileged remote attacker could potentially exploit this vulnerability, leading to information disclosure...
PT-2024-9597
Name of the Vulnerable Software and Affected Versions Dell RecoverPoint for Virtual Machines version 6.0.x Description The issue is related to insufficient restriction of authentication attempts, allowing a remote attacker to perform a brute force attack. This could lead to a complete system...
CVE-2024-48007: Use of Hard-coded Credentials
Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to...
CVE-2024-22461: Improper Verification of Cryptographic Signature
Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system...
PT-2024-9595
Name of the Vulnerable Software and Affected Versions Dell RecoverPoint for Virtual Machines version 6.0.x Description The issue is related to an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leadi...
CVE-2024-24902: Improper Access Control
Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability. A low privileged local attacker could potentially exploit this vulnerability leading to gaining access to unauthorized data for a limited time...
Dell RecoverPoint for Virtual Machines encryption issue vulnerability
Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. A cryptographic issue vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1 P1,...
CVE-2024-47984: Improper Filtering of Special Elements
Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention ...
CVE-2024-48008: ASP.NET Misconfiguration: Creating Debug Binary
Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information...
CVE-2024-38488: Improper Restriction of Excessive Authentication Attempts
Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login for...
CVE-2024-22426: Unrestricted Upload of File with Dangerous Type
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user,...
CVE-2024-22425: Improper Restriction of Excessive Authentication Attempts
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to launch a brute force attack or a dictionary attack against the RecoverPoint login form. This...
CVE-2018-15771
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI...
EMC RecoverPoint command injection in SSH username
Added: 07/05/2018 CVE: CVE-2018-1235 BID: 104246 Background Dell EMC RecoverPoint is an application recovery solution. Problem A command injection vulnerability allows a remote attacker to execute arbitrary commands embedded in the username of an SSH authentication request. Resolution Upgrade to...
PT-2018-10844
Name of the Vulnerable Software and Affected Versions EMC RecoverPoint for Virtual Machines versions prior to 5.1.1 EMC RecoverPoint version 5.1.0.0 EMC RecoverPoint versions prior to 5.0.1.3 Description An issue was discovered that allows a malicious user with boxmgmt privileges to bypass Boxmgm...
PT-2018-10850
Name of the Vulnerable Software and Affected Versions EMC RecoverPoint for Virtual Machines versions prior to 5.1.1 EMC RecoverPoint version 5.1.0.0 EMC RecoverPoint versions prior to 5.0.1.3 Description An issue was discovered that allows a malicious user with admin privileges to escape from the...