Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2019-3753

Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius cre

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell EMC PowerConnect 8024

  • unspecified to < 5.1.15.2affected

Dell EMC PowerConnect 7000

  • unspecified to < 5.1.15.2affected

Dell EMC PowerConnect M6348

  • unspecified to < 5.1.15.2affected

Dell EMC PowerConnect M6220

  • unspecified to < 5.1.15.2affected

Dell EMC PowerConnect M8024

  • unspecified to < 5.1.15.2affected

Dell EMC PowerConnect M8024-K

  • unspecified to < 5.1.15.2affected

References