CVE-2024-30111

Katalog CVE

CVSS 7.5 · High EPSS 0,32%

Kerentanan Missing Immutable Root of Trust in Hardware pada hcltech dryice aex. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breaches or other malicious activities.

Rincian

Terbit di NVD

28 Juni 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1326: Missing Immutable Root of Trust in Hardware

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 23,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193 advisory vendor