CVE-2019-3753

State: Published
Severity: 7.2 High
Published: Aug 20, 2019
Updated: Sep 16, 2024
Reserved: Jan 3, 2019

Description

Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.

Scores

CVSS	Score	Vector	Source
3.0	7.2 High	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	dell

Weaknesses

CWE-312 Cleartext Storage of Sensitive Information

Affected Products

Product	Versions
PowerConnect 8024Dell EMC	before 5.1.15.2Affected
PowerConnect 7000Dell EMC	before 5.1.15.2Affected
PowerConnect M6348Dell EMC	before 5.1.15.2Affected
PowerConnect M6220Dell EMC	before 5.1.15.2Affected
PowerConnect M8024Dell EMC	before 5.1.15.2Affected
PowerConnect M8024-KDell EMC	before 5.1.15.2Affected

References

https://www.dell.com/support/article/sln318359/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.