How severe is CVE-2024-47984?

CVE-2024-47984 has a CVSS 3.x base score of 4.4, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.

Is CVE-2024-47984 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2024-47984?

CVE-2024-47984 primarily affects Dell Recoverpoint For Virtual Machines. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2024-47984?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2024-47984 have an EU (EUVD) identifier?

Yes. CVE-2024-47984 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-42854.

When was CVE-2024-47984 published?

CVE-2024-47984 was published on 2024-12-13 and last updated on 2026-06-17.

CVE-2024-47984

CVE-2024-47984 is a medium-severity vulnerability in Dell Recoverpoint For Virtual Machines with a CVSS 3.x base score of 4.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-790.

Key facts

Severity: Medium (CVSS 3.x base score 4.4)
EPSS exploit prediction: 0% (36th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2024-42854
Weakness: CWE-790
Affected product: Dell Recoverpoint For Virtual Machines
Published: 2024-12-13
Last modified: 2026-06-17

Description

Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention in getting system back to stable state.

Frequently asked questions

What is CVE-2024-47984?: Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention in getting system back to stable state.
How severe is CVE-2024-47984?: CVE-2024-47984 has a CVSS 3.x base score of 4.4, rated medium severity. It is exploitable over local access with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
Is CVE-2024-47984 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (36th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2024-47984?: CVE-2024-47984 primarily affects Dell Recoverpoint For Virtual Machines. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2024-47984?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2024-47984 have an EU (EUVD) identifier?: Yes. CVE-2024-47984 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-42854.
When was CVE-2024-47984 published?: CVE-2024-47984 was published on 2024-12-13 and last updated on 2026-06-17.

References

https://www.dell.com/support/kbdoc/en-us/000259765/dsa-2024-429-security-update-for-dell-recoverpoint-for-virtual-machines-multiple-third-party-component-vulnerabilities

Affected products (2)

cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1:*:*:*:*:*:*
cpe:2.3:a:dell:recoverpoint_for_virtual_machines:6.0:sp1_p1:*:*:*:*:*:*

More vulnerabilities in Dell Recoverpoint For Virtual Machines

CVE-2026-22769 — Critical (CVSS 10.0): Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability.…
CVE-2024-22461 — High (CVSS 8.8): Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote…
CVE-2024-22426 — High (CVSS 7.2): Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An…
CVE-2025-21105 — Medium (CVSS 6.6): Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious…
CVE-2024-24902 — Medium (CVSS 6.6): Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability. A low privileged local…
CVE-2024-28980 — Medium (CVSS 6.5): Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability…

All CVEs affecting Dell Recoverpoint For Virtual Machines →

Other CWE-790 vulnerabilities

CVE-2023-22578 — Critical (CVSS 10.0): Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections.
CVE-2023-45239 — Critical (CVSS 9.8): A lack of input validation exists in tac_plus prior to commit 4fdf178 which, when pre or post auth commands are…
CVE-2024-31616 — High (CVSS 8.8): An issue discovered in RG-RSR10-01G-T(W)-S and RG-RSR10-01G-T(WA)-S routers with firmware version…
CVE-2026-2328 — High (CVSS 7.5): An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their…
CVE-2025-27260 — High (CVSS 7.5): Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains an Improper Filtering of…
CVE-2025-0431 — Medium (CVSS 5.8): Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send…

Browse all CWE-790 vulnerabilities →