Executive Summary

Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contains a hardcoded credential vulnerability. This means that the software includes fixed credentials embedded in its code that cannot be changed by users.

An unauthenticated remote attacker who knows these hardcoded credentials could exploit this vulnerability to gain unauthorized access to the underlying operating system.

This access could allow the attacker to achieve root-level persistence, meaning they could maintain control over the system at the highest privilege level.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can have a critical impact because it allows an unauthenticated remote attacker to gain unauthorized root-level access to the system.

Such access could lead to complete compromise of the affected system, including the ability to manipulate data, disrupt services, or use the system as a foothold for further attacks.

Useful 0 Not Useful 0

Compliance Impact

I don't know

Useful 0 Not Useful 0

Detection Guidance

I don't know

Useful 0 Not Useful 0

Mitigation Strategies

Dell recommends that customers upgrade Dell RecoverPoint for Virtual Machines to version 6.0.3.1 HF1 or later.

Applying the available remediations as soon as possible is advised to prevent exploitation of the hardcoded credential vulnerability.

Useful 0 Not Useful 0