CVE-2024-38488

Summary

CVE-2024-38488 is a newly identified vulnerability affecting Dell RecoverPoint for Virtual Machines 6.0.x. This issue involves an improper Restriction of Excessive Authentication, enabling network attackers to launch brute force or dictionary attacks against the RecoverPoint login form. Successful exploitation of this vulnerability could result in complete system compromise. Attackers can automate the process of guessing valid user passwords, posing a significant security risk. Dell urges users to upgrade to the latest version or implement additional security measures to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.