Dell RecoverPoint For Virtual Machines vulnerabilities

17 CVEs affecting Dell RecoverPoint For Virtual Machines, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-23501, published 2026-08-19.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-22769: Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability, published 2026-02-17. Critical severity, CVSS 10.0. Actively exploited: in CISA KEV since 2026-02-18. EPSS: 13.5% chance of exploitation in the next 30 days. Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability. This is considered critical as an unauthenticated remote attacker with knowledge…
• CVE-2026-23501, published 2026-08-19. High severity, CVSS 7.2. EPSS: 2% chance of exploitation in the next 30 days. Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker…
• CVE-2016-6650, published 2017-03-21. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Stripping Vulnerability that may potentially be exploited by malicious users to…
• CVE-2024-22426, published 2024-02-16. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to…
• CVE-2016-6649, published 2017-02-03. Medium severity, CVSS 6.7. EPSS: 0.9% chance of exploitation in the next 30 days. EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0 are affected by multiple command injection vulnerabilities where a malicious administrator with…
• CVE-2024-22461, published 2024-12-13. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as…
• CVE-2019-3727, published 2019-05-15. Medium severity, CVSS 6.7. EPSS: 0.7% chance of exploitation in the next 30 days. Dell EMC RecoverPoint versions prior to 5.1.3 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an OS command injection vulnerability in the installation feature of Boxmgmt CLI. A malicious…
• CVE-2024-48008, published 2024-12-13. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information…
• CVE-2024-28980, published 2024-12-13. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially…
• CVE-2024-47984, published 2024-12-13. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most…

Latest

• CVE-2025-21106, published 2025-02-20. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting…
• CVE-2025-21105, published 2025-02-20. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the…
• CVE-2024-24902, published 2024-12-13. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability. A low privileged local attacker could potentially exploit this vulnerability leading to gaining access…
• CVE-2024-48007, published 2024-12-13. Critical severity, CVSS 9.8. EPSS: 0.4% chance of exploitation in the next 30 days. Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to…
• CVE-2024-38488, published 2024-12-13. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this…