CVE-2024-22425

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to launch a brute force attack or a dictionary attack against the RecoverPoint login form. This allows attackers to brute-force the password of valid users in an automated manner.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-307

Affected software

No affected versions have been published.

Timeline

Published: Feb 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-224269.8Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker cou CVE-2024-224287.8Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivil CVE-2024-224296.7Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially CVE-2024-22438.8A vulnerability was found in csmock where a regular user of the OSH service (anyone with a valid Kerberos ticket) can use the vulnerability CVE-2024-224305.5Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicio CVE-2024-224326.5Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Da CVE-2024-224339.8Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in CVE-2024-224358.3A potential security vulnerability has been identified in Web ViewPoint Enterprise software. This vulnerability could be exploited to allow CVE-2024-224366.5A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a denial of service.CVE-2024-224377.3A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vu CVE-2024-224383.5A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820 Network switches. The vulnerability CVE-2024-224396.9A potential security vulnerability has been identified in HPE FlexFabric and FlexNetwork series products. This vulnerability could be exploi