CVE-2024-38488
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD
Description
Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login form and a complete system compromise.
This allows attackers to brute-force the password of valid users in an automated manner.
Affected (2)
Products: Dell: Recoverpoint For Virtual Machines
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 6.0 sp1 |
References (1)
Source: security_alert@emc.com
Vendor Advisory
Timeline
No history available yet.