CVE-2024-28980 Weak cryptography in RecoverPoint for Virtual Machines
An unauthenticated remote attacker can exploit weak SSH cryptography in Dell RecoverPoint for VMs to achieve remote code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-28980?
CVE-2024-28980 is a medium-severity vulnerability in Dell RecoverPoint for Virtual Machines, published on 13 Dec 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Weakness: CWE-327
Which versions are affected by CVE-2024-28980?
It affects 1 product.
Products include Dell Recoverpoint for Virtual Machines.
How do I fix CVE-2024-28980?
No fix has been published for CVE-2024-28980 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-28980 being exploited?
There is no known exploitation of CVE-2024-28980 in the wild and no public exploit code.
Other vulnerabilities in Dell RecoverPoint for Virtual Machines
- CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials
- CVE-2024-22461 Command injection in RecoverPoint for Virtual Machines
- CVE-2016-6650 Security feature bypass in EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0
- CVE-2024-22426 Command injection in RecoverPoint for VMs
- CVE-2016-6649 Command injection in EMC RecoverPoint and EMC RecoverPoint for Virtual Machines EMC RecoverPoint versions before 4.4.1.1 and EMC RecoverPoint for Virtual Machines versions before 5.0
Sources
Also known as GHSA-jqwg-pp3j-9wvj.