PT-2024-9597 · Dell · Dell Recoverpoint For Virtual Machines

Published 2024-12-13 · Updated 2024-12-14 · CVE-2024-38488

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell RecoverPoint for Virtual Machines version 6.0.x

Description The issue is related to insufficient restriction of authentication attempts, allowing a remote attacker to perform a brute force attack. This could lead to a complete system compromise, enabling attackers to brute-force the password of valid users in an automated manner. The vulnerability can be exploited by a network attacker, potentially resulting in a dictionary attack against the RecoverPoint login form.

Recommendations For version 6.0.x, consider restricting access to the login form to minimize the risk of exploitation. As a temporary workaround, implement additional authentication measures, such as rate limiting or IP blocking, to prevent brute force attacks. Update to a newer version that addresses the improper restriction of excessive authentication vulnerability when available.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

BDU:2024-11306

CVE-2024-38488

Affected Products

Dell Recoverpoint For Virtual Machines

References · 6

• https://bdu.fstec.ru/vul/2024-11306 · Security Note
• https://dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38488 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38488 · Vendor Advisory
• https://twitter.com/CVEnew/status/1868033924410286453 · Twitter Post
• https://t.me/cvedetector/12874 · Telegram Post