CVE-2023-44300
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance. A local attacker with privileges could potentially exploit this vulnerability, leading to the disclosure of certain service credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
Dell DM5500 5.14.0.0 contiene una vulnerabilidad de almacenamiento de contraseñas de texto plano en PPOE. Un atacante local con privilegios podría explotar esta vulnerabilidad, lo que daría lugar a la divulgación de determinadas credenciales de usuario. Es posible que el atacante pueda utilizar las credenciales expuestas para acceder a la aplicación vulnerable con los privilegios de la cuenta comprometida.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-09-28 CVE Reserved
- 2023-12-04 CVE Published
- 2023-12-04 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-256: Plaintext Storage of a Password
- CWE-522: Insufficiently Protected Credentials
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Dell Search vendor "Dell" | Powerprotect Data Manager Dm5500 Firmware Search vendor "Dell" for product "Powerprotect Data Manager Dm5500 Firmware" | <= 5.14.0.0 Search vendor "Dell" for product "Powerprotect Data Manager Dm5500 Firmware" and version " <= 5.14.0.0" | - |
Affected
| in | Dell Search vendor "Dell" | Powerprotect Data Manager Dm5500 Search vendor "Dell" for product "Powerprotect Data Manager Dm5500" | - | - |
Safe
|