CVE-2019-3753
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.
Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 y M8024-K que ejecutan versiones de firmware anteriores a 5.1.15.2 contienen una vulnerabilidad de almacenamiento de contraseñas de texto sin formato. Las credenciales de TACACS-Radius se salvan en texto sin formato en el menú de configuración del sistema. Un usuario malintencionado autenticado con acceso al menú de configuración del sistema puede obtener la contraseña expuesta para usarla en otros ataques.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-01-03 CVE Reserved
- 2019-08-20 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-312: Cleartext Storage of Sensitive Information
- CWE-522: Insufficiently Protected Credentials
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.dell.com/support/article/sln318359 | 2020-10-16 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Dell Search vendor "Dell" | Emc Powerconnect 8024 Firmware Search vendor "Dell" for product "Emc Powerconnect 8024 Firmware" | < 5.1.15.2 Search vendor "Dell" for product "Emc Powerconnect 8024 Firmware" and version " < 5.1.15.2" | - |
Affected
| in | Dell Search vendor "Dell" | Emc Powerconnect 8024 Search vendor "Dell" for product "Emc Powerconnect 8024" | - | - |
Safe
|
| Dell Search vendor "Dell" | Emc Powerconnect 7000 Firmware Search vendor "Dell" for product "Emc Powerconnect 7000 Firmware" | < 5.1.15.2 Search vendor "Dell" for product "Emc Powerconnect 7000 Firmware" and version " < 5.1.15.2" | - |
Affected
| in | Dell Search vendor "Dell" | Emc Powerconnect 7000 Search vendor "Dell" for product "Emc Powerconnect 7000" | - | - |
Safe
|
| Dell Search vendor "Dell" | Emc Powerconnect M6348 Firmware Search vendor "Dell" for product "Emc Powerconnect M6348 Firmware" | < 5.1.15.2 Search vendor "Dell" for product "Emc Powerconnect M6348 Firmware" and version " < 5.1.15.2" | - |
Affected
| in | Dell Search vendor "Dell" | Emc Powerconnect M6348 Search vendor "Dell" for product "Emc Powerconnect M6348" | - | - |
Safe
|
| Dell Search vendor "Dell" | Emc Powerconnect M6220 Firmware Search vendor "Dell" for product "Emc Powerconnect M6220 Firmware" | < 5.1.15.2 Search vendor "Dell" for product "Emc Powerconnect M6220 Firmware" and version " < 5.1.15.2" | - |
Affected
| in | Dell Search vendor "Dell" | Emc Powerconnect M6220 Search vendor "Dell" for product "Emc Powerconnect M6220" | - | - |
Safe
|
| Dell Search vendor "Dell" | Emc Powerconnect M8024 Firmware Search vendor "Dell" for product "Emc Powerconnect M8024 Firmware" | < 5.1.15.2 Search vendor "Dell" for product "Emc Powerconnect M8024 Firmware" and version " < 5.1.15.2" | - |
Affected
| in | Dell Search vendor "Dell" | Emc Powerconnect M8024 Search vendor "Dell" for product "Emc Powerconnect M8024" | - | - |
Safe
|
| Dell Search vendor "Dell" | Emc Powerconnect M8024-k Firmware Search vendor "Dell" for product "Emc Powerconnect M8024-k Firmware" | < 5.1.15.2 Search vendor "Dell" for product "Emc Powerconnect M8024-k Firmware" and version " < 5.1.15.2" | - |
Affected
| in | Dell Search vendor "Dell" | Emc Powerconnect M8024-k Search vendor "Dell" for product "Emc Powerconnect M8024-k" | - | - |
Safe
|