VULNERABILITY INTELLIGENCE

CVE-2024-48008

CVSS score5.3 MEDIUM
EPSS probability0.56%
CISA KEVNot currently listed
Published2024-12-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information

Weakness classification

  • security_alert@emc.com: CWE-11
  • nvd@nist.gov: CWE-78

Primary references