Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system.
History

Mon, 23 Dec 2024 18:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Fri, 13 Dec 2024 13:30:00 +0000

Type Values Removed Values Added
Description Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system.
Weaknesses CWE-347
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published: 2024-12-13T13:25:25.661Z

Updated: 2024-12-23T18:07:41.498Z

Reserved: 2024-01-10T15:29:59.457Z

Link: CVE-2024-22461

cve-icon Vulnrichment

Updated: 2024-12-23T18:07:36.910Z

cve-icon NVD

Status : Received

Published: 2024-12-13T14:15:21.383

Modified: 2024-12-13T14:15:21.383

Link: CVE-2024-22461

cve-icon Redhat

No data.