What is CVE-2024-22426?

CVE-2024-22426 is a high-severity vulnerability in Dell Recoverpoint_for_virtual_machines, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 7.2/10. Published 2024-02-16.

How severe is CVE-2024-22426?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Dell Recoverpoint_for_virtual_machines

CVE-2024-22426

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands…

Vulnerability class: Unrestricted File Upload

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Recoverpoint_for_virtual_machines — versions 5.3, 6.0
Dell Recoverpoint For Vms — versions 5.3 SP2, 5.3 SP2 P1, 5.3 SP2 P2

Weakness classification (CWE)

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)
security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2024-22426?: CVE-2024-22426 is a high-severity vulnerability in Dell Recoverpoint_for_virtual_machines, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 7.2/10. Published 2024-02-16.
How severe is CVE-2024-22426?: High severity. CVSS v3 base score is 7.2 out of 10.