Approved changes feed: RSS · Atom

cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1_p2:*:*:*:*:*:*

part: a version: 6.0 update: sp1_p2

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductRecoverpoint For Virtual Machines (c38ce68c-a555-59a7-9a3e-bb6d54672556)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-22769 vulnerable 2026-06-08 07:51:13.786403 Details available
CRITICAL (10)
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge of the hardcoded credential could potentially exploit this vulnerability leading to unauthorized access to the underlying operating system and root-level persistence. Dell recommends that customers upgrade or apply one of the remediations as soon as possible.
Published: 2026-02-17T19:19:34.178Z
Updated: 2026-02-26T14:44:19.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21106 vulnerable 2026-06-08 07:08:51.249668 Details available
MEDIUM (5.5)
Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system.
Published: 2025-02-20T12:04:12.190Z
Updated: 2025-02-20T14:13:50.199Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21105 vulnerable 2026-06-08 07:08:51.249218 Details available
MEDIUM (6.6)
Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down the server, modifying the configuration leading to gain access to unauthorized data.
Published: 2025-02-20T12:10:15.653Z
Updated: 2025-02-20T13:59:59.929Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.