Critical Vulnerability Found in Dell RecoverPoint for Virtual Machines

What changed

Dell has identified a significant vulnerability in its RecoverPoint for Virtual Machines (RP4VMs) product. This flaw, stemming from hard-coded credentials, poses a serious risk as it can be exploited by unauthenticated remote attackers.

Versions prior to 6.0.3.1 HF1 are particularly vulnerable, allowing potential unauthorized access to the underlying operating system and enabling root-level persistence.

Who is affected

The vulnerability primarily impacts users of Dell's RecoverPoint for Virtual Machines, particularly those operating on older versions.

Organizations utilizing RP4VMs for data protection and disaster recovery are at risk and should take immediate action.

• Dell RecoverPoint for Virtual Machines (RP4VMs), versions prior to 6.0.3.1 HF1.
• Businesses relying on Dell for virtual machine data management.
• IT departments managing backup and recovery solutions.

What to do

Dell strongly advises affected customers to upgrade to the latest version or apply available remediation measures promptly.

Staying informed about updates and patches from Dell is crucial to mitigate this vulnerability.

• Upgrade to Dell RecoverPoint for Virtual Machines version 6.0.3.1 HF1 or later.
• Implement recommended security practices to minimize exposure.
• Regularly review and audit system credentials and access controls.