Dell RecoverPoint for Virtual Machines OS Command Injection Vulnerability
CVE-2024-48008 Published on December 13, 2024
Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information
Vulnerability Analysis
CVE-2024-48008 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be low. considered to have a small impact on confidentiality and integrity and availability.
Weakness Type
ASP.NET Misconfiguration: Creating Debug Binary
Debugging messages help attackers learn about the system and plan a form of attack. ASP .NET applications can be configured to produce debug binaries. These binaries give detailed debugging messages and should not be used in production environments. Debug binaries are meant to be used in a development or testing environment and can pose a security risk if they are deployed to production.
Products Associated with CVE-2024-48008
Want to know whenever a new CVE is published for Dell Recoverpoint Virtual Machines? stack.watch will email you.
Affected Versions
Dell RecoverPoint for Virtual Machines:- Version 6.0 SP1 is affected.
- Version 6.0 SP1 P1 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.