← Back

CVE-2026-70414

nvd nist
Published: Oct 6, 2026Modified: Oct 13, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: security_alert@emc.com (Secondary)

Description

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Affected (1)

Dell
1 product
Command|configure
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Command|configure
version < 5.2.3.35

Related CWEs

CWE-256
Plaintext Storage of a Password
Storing a password in plaintext may result in a system compromise.

References (1)

Source: security_alert@emc.com
PatchVendor Advisory

Timeline

No history available yet.