Vulnerability · Published Dec 13, 2024 · Assigned by dell
CVE-2024-48007
Medium 5.3
In plain English
A medium-severity hard-coded credentials in RecoverPoint for Virtual Machines from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.4%top 63.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to gaining access to unauthorized data.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | RecoverPoint for Virtual Machines | 6.0 SP16.0 SP1 P1 |
Weakness: CWE-798 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N