{"id":"CVE-2024-30111","state":"PUBLISHED","title":"Missing Root Detection vulnerability affects DRYiCE AEX v10","description":"HCL DRYiCE AEX product is impacted by Missing\nRoot Detection vulnerability in the mobile application. The  mobile app can be installed in the rooted\ndevice due to which malicious users can gain unauthorized access to the rooted\ndevices, compromising security and potentially leading to data breaches or\nother malicious activities.","publishedAt":"2024-06-28T06:39:36.149Z","updatedAt":"2024-08-02T01:25:03.081Z","severity":{"score":3.3,"label":"Low","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","source":"HCL"},"assigner":"HCL","products":["HCL Software DRYiCE AEX"],"affected":[{"vendor":"HCL Software","product":"DRYiCE AEX","defaultStatus":"unaffected","versions":[{"version":"10","status":"affected"}]}],"references":["https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193"],"weaknesses":["CWE-1326"],"ingestedAt":"2026-10-29T20:07:21.467Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/30xxx/CVE-2024-30111.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-30111","state":"PUBLISHED","datePublished":"2024-06-28T06:39:36.149Z","dateUpdated":"2024-08-02T01:25:03.081Z","assignerShortName":"HCL","assignerOrgId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","dateReserved":"2024-03-22T23:57:21.324Z"},"containers":{"cna":{"title":"Missing Root Detection vulnerability affects DRYiCE AEX v10","descriptions":[{"lang":"en","value":"HCL DRYiCE AEX product is impacted by Missing\nRoot Detection vulnerability in the mobile application. The  mobile app can be installed in the rooted\ndevice due to which malicious users can gain unauthorized access to the rooted\ndevices, compromising security and potentially leading to data breaches or\nother malicious activities."}],"affected":[{"vendor":"HCL Software","product":"DRYiCE AEX","defaultStatus":"unaffected","versions":[{"version":"10","status":"affected"}]}],"references":[{"url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":3.3,"baseSeverity":"LOW","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL."}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1326","description":"CWE-1326:  Missing Immutable Root of Trust in Hardware","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"HCL","orgId":"1e47fe04-f25f-42fa-b674-36de2c5e3cfc","dateUpdated":"2024-06-28T06:39:36.149Z"},"datePublic":"2024-06-27T19:00:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-28T19:34:01.190491Z","id":"CVE-2024-30111","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-07-02T14:26:34.504Z"}},{"title":"CVE Program Container","references":[{"url":"https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T01:25:03.081Z"}}]}}}