Fiche vulnérabilité
CVE-2024-22426 : faille critique dell recoverpoint for virtual machines (CVSS 9.8)
Description
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user, resulting in a complete system compromise.
En bref
- Sévérité
- Critique (CVSS 9.8)
- Vecteur CVSS
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Exploitation active
- Non signalée par la CISA
- Publication
- 16 févr. 2024
- Dernière mise à jour
- 17 juin 2026
Produits concernés
- dell recoverpoint for virtual machines