CVE-2024-22425

Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to launch a brute force attack or a dictionary attack against the RecoverPoint login form. This allows attackers to brute-force the password of valid users in an automated manner.

• CWE-307

• https://www.dell.com/support/kbdoc/en-us/000222133/dsa-2024-092-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-vulnerabilitiesVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000228154/dsa-2024-369-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-vulnerabilitiesVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000222133/dsa-2024-092-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-vulnerabilitiesVendor Advisory

Published

Feb 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2242The Contact Form 7 plugin for WordPress is vulnerable to Ref…6.1
• CVE-2024-22420JupyterLab is an extensible environment for interactive and …6.1
• CVE-2024-22421JupyterLab is an extensible environment for interactive and …6.5
• CVE-2024-22422AnythingLLM is an application that turns any document, resou…7.5
• CVE-2024-22423yt-dlp is a youtube-dl fork with additional features and fix…9.8
• CVE-2024-22424Argo CD is a declarative, GitOps continuous delivery tool fo…8.3
• CVE-2024-22426Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contai…9.8
• CVE-2024-22428 Dell iDRAC Service Module, versions 5.2.0.0 and prior, cont…7.8
• CVE-2024-22429Dell BIOS contains an Improper Input Validation vulnerabilit…6.7
• CVE-2024-2243A vulnerability was found in csmock where a regular user of …8.8
• CVE-2024-22430 Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contai…5.5
• CVE-2024-22432 Networker 19.9 and all prior versions contains a Plain-text…6.5