Dell RecoverPoint for Virtual Machines Command Execution Vulnerability

A command execution vulnerability has been identified in Dell RecoverPoint for Virtual Machines versions 6.0 SP1, 6.0 SP1 P1, and 6.0 SP1 P2. This vulnerability allows a low-privileged user with local access to execute commands by running a specific binary. The executed commands can include administrative actions, such as shutting down the server or modifying configurations, which could lead to unauthorized access to data.

Impact

Exploitation of this vulnerability could allow a low-privileged user to execute commands with administrative privileges, potentially leading to unauthorized data access, server shutdowns, or disruptive configuration changes.

Remediation

Users can upgrade to Dell RecoverPoint for Virtual Machines version 6.0 SP2 or later. For more information, visit the Dell RecoverPoint for Virtual Machines Drivers page.