← Back

CVE-2024-30111

nvd nist
Published: Jun 28, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breaches or other malicious activities.

Affected (1)

Products: Hcltech: Dryice Aex
Hcltech
1 product
Dryice Aex
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Dryice Aex
Version 10.0

Related CWEs

CWE-1326
Missing Immutable Root of Trust in Hardware
A missing immutable root of trust in the hardware results in the ability to bypass secure boot or execute untrusted or adversarial boot code.

References (2)

Source: psirt@hcl.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.