CVE-2025-21105CWE-284

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability

Medium · published February 20, 2025

CVSS v3.1
6.6
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down the server, modifying the configuration leading to gain access to unauthorized data.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-02-20T12:10Z
EPSS history
Timeline
  • 20 FEB 12:10Z
    Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability
    cvelistv5