CVE-2025-21105

Published Feb 20, 2025

Last updated 3 days ago

Overview

Description
Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down the server, modifying the configuration leading to gain access to unauthorized data.
Source
security_alert@emc.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
6.6
Impact score
4.7
Exploitability score
1.8
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Severity
MEDIUM

Weaknesses

security_alert@emc.com
CWE-284

Social media

Hype score
Not currently trending