PT-2024-9596 · Dell · Dell Recoverpoint For Virtual Machines

Published 2024-12-13 · Updated 2024-12-14 · CVE-2024-47984

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell RecoverPoint for Virtual Machines version 6.0.x

Description The issue is related to a Denial of Service vulnerability. A user with remote access could exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot. This would require technical support intervention to get the system back to a stable state. The vulnerability is also associated with errors in filtering special elements, which could allow a remote attacker to cause a denial of service.

Recommendations For Dell RecoverPoint for Virtual Machines version 6.0.x, consider restricting remote access until a fix is available to minimize the risk of exploitation. As a temporary workaround, it may be necessary to manually intervene and restore the system to a stable state after a reboot. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-790

Related Identifiers

BDU:2024-11305

CVE-2024-47984

Affected Products

Dell Recoverpoint For Virtual Machines

References · 5

• https://osv.dev/vulnerability/CVE-2024-47984 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47984 · Security Note
• https://bdu.fstec.ru/vul/2024-11305 · Security Note
• https://dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://twitter.com/CVEnew/status/1868033922409574566 · Twitter Post