CVE-2024-22426: Malicious File Upload
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user, resulting in a complete system compromise.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22426?
CVE-2024-22426 has a high severity rating due to the potential for unauthenticated remote command execution by an attacker.
How do I fix CVE-2024-22426?
To fix CVE-2024-22426, update Dell RecoverPoint for Virtual Machines to the latest available patched version as recommended by Dell.
What are the affected versions in CVE-2024-22426?
CVE-2024-22426 affects Dell RecoverPoint for Virtual Machines versions 5.3.x through 6.0.SP1.
Can CVE-2024-22426 be exploited remotely?
Yes, CVE-2024-22426 can be exploited remotely by an unauthenticated attacker.
What are the risks associated with CVE-2024-22426?
The risks associated with CVE-2024-22426 include unauthorized execution of operating system commands with root privileges, which can lead to severe system compromise.