CVE-2024-22426

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user, resulting in a complete system compromise.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434 CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Feb 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-224287.8Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivil CVE-2024-224296.7Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially CVE-2024-22438.8A vulnerability was found in csmock where a regular user of the OSH service (anyone with a valid Kerberos ticket) can use the vulnerability CVE-2024-224305.5Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicio CVE-2024-224326.5Networker 19.9 and all prior versions contains a Plain-text Password stored in temporary config file during backup duration in NMDA MySQL Da CVE-2024-224339.8Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in CVE-2024-224358.3A potential security vulnerability has been identified in Web ViewPoint Enterprise software. This vulnerability could be exploited to allow CVE-2024-224366.5A security vulnerability in HPE IceWall Agent products could be exploited remotely to cause a denial of service.CVE-2024-224377.3A potential security vulnerability has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This vu CVE-2024-224383.5A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820 Network switches. The vulnerability CVE-2024-224396.9A potential security vulnerability has been identified in HPE FlexFabric and FlexNetwork series products. This vulnerability could be exploi CVE-2024-22445.3REST service authentication anomaly with “valid username/no password” credential combination for batch job processing resulting in successfu