CVE-2025-21105 — Dell / RecoverPoint for VMs

Description (CNA)

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down the server, modifying the configuration leading to gain access to unauthorized data.

Affected (CNA)

Vendor / product	Versions
Dell / RecoverPoint for VMs	affected 6.0 SP1; affected 6.0 SP1 P1; affected 6.0 SP1 P2

CWE

CWE-284

References

https://www.dell.com/support/kbdoc/en-us/000287503/dsa-2025-101-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-component-vulnerabilities

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.