← Back

CVE-2024-38488

nvd nist
Published: Dec 13, 2024Modified: Feb 4, 2025

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login form and a complete system compromise. This allows attackers to brute-force the password of valid users in an automated manner.

Affected (2)

1 product
Recoverpoint For Virtual Machines
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Dell
Version 6.0 sp1
Version 6.0 sp1_p1

Timeline

No history available yet.