CVE-2019-3753

· MEDIUMModified

← All CVEs

CVSS v3.1

6.5

EPSS

0.65%

Published

Aug 20, 2019

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-312CWE-522

Affected Products (12)

dell · emc_powerconnect_8024_firmware (up to 5.1.15.2)vulnerable

dell · emc_powerconnect_8024

dell · emc_powerconnect_7000_firmware (up to 5.1.15.2)vulnerable

dell · emc_powerconnect_7000

dell · emc_powerconnect_m6348_firmware (up to 5.1.15.2)vulnerable

dell · emc_powerconnect_m6348

dell · emc_powerconnect_m6220_firmware (up to 5.1.15.2)vulnerable

dell · emc_powerconnect_m6220

dell · emc_powerconnect_m8024_firmware (up to 5.1.15.2)vulnerable

dell · emc_powerconnect_m8024

dell · emc_powerconnect_m8024-k_firmware (up to 5.1.15.2)vulnerable

dell · emc_powerconnect_m8024-k

References (2)

https://www.dell.com/support/article/sln318359/

Vendor Advisory

https://www.dell.com/support/article/sln318359/

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs