CVE-2024-48008

—

CVSS 3.1

6.5 medium

EPSS

<1%p45

Published

Dec 13, 2024 (Dec 13, 2024)

Modified

Jun 17, 2026

Description

Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information

Vendors: dell
Products: recoverpoint for virtual machines
Weakness: CWE-11, CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.