Priority CRITICAL 100KEV
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.13525 · Published 2026-02-17 · Fixed in 6.0.3.1 HF1 CWE-798
Priority LOW 33
Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00157 · Published 2025-02-20 · No fix listed CWE-284
Priority LOW 24
Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2025-02-20 · No fix listed CWE-276
Priority MEDIUM 49
Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00553 · Published 2024-12-13 · No fix listed CWE-327
Priority LOW 29
Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00466 · Published 2024-12-13 · No fix listed CWE-790
Priority LOW 29
Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability.
CVSS 3.1MEDIUM 6.6· Local · Low privileges · No interaction · EPSS 0.00192 · Published 2024-12-13 · No fix listed CWE-284
Priority MEDIUM 48
Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00322 · Published 2024-12-13 · No fix listed CWE-307
Priority MEDIUM 48
Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00415 · Published 2024-12-13 · No fix listed CWE-798
Priority LOW 30
Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00565 · Published 2024-12-13 · No fix listed CWE-11
Priority MEDIUM 41
Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00776 · Published 2024-12-13 · No fix listed CWE-347
Priority MEDIUM 52
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01403 · Published 2024-02-16 · No fix listed CWE-434
Priority MEDIUM 48
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00458 · Published 2024-02-16 · No fix listed CWE-307
Priority LOW 31
Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI.
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00657 · Published 2019-05-15 · No fix listed CWE-78
Priority LOW 36
EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to compromise the affected s…
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.01626 · Published 2017-03-21 · No fix listed CWE-200
Priority LOW 31
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with configuration privile…
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00886 · Published 2017-02-03 · No fix listed CWE-77
Priority LOW 21
EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by sensitive information disclosure vulnerability as a result of incorrect permissions set on a sensitiv…
CVSS 3.0MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00427 · Published 2017-02-03 · No fix listed CWE-275
THREATIST.IORead the docs