Description (CNA)
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user, resulting in a complete system compromise.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Dell / RecoverPoint for VMs | affected 5.3 SP2; affected 5.3 SP2 P1; affected 5.3 SP2 P2; affected 5.3 SP2 P4; affected 5.3 SP3 P1; affected 5.3 SP3 P2; affected 6.0.SP1 |
CWE
CWE-434
References
- https://www.dell.com/support/kbdoc/en-us/000222133/dsa-2024-092-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000228154/dsa-2024-369-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-vulnerabilities
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.