CVE-2024-28980: Critical severity dell emc recoverpoint vulnerability
Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28980?
CVE-2024-28980 is considered a critical vulnerability due to its potential for remote code execution by unauthenticated attackers.
How do I fix CVE-2024-28980?
To resolve CVE-2024-28980, you should update Dell RecoverPoint for VMs to the latest version or apply the recommended security patches.
Who is affected by CVE-2024-28980?
CVE-2024-28980 affects users of Dell RecoverPoint for VMs versions 6.0.x, including 6.0-sp1 and 6.0-sp1_p1.
What types of attacks can exploit CVE-2024-28980?
CVE-2024-28980 can be exploited by unauthenticated remote attackers to gain unauthorized access and potentially execute arbitrary code.
What components of Dell RecoverPoint for VMs are vulnerable in CVE-2024-28980?
CVE-2024-28980 involves a use of a broken or risky cryptographic algorithm vulnerability specifically associated with the SSH component.