Description
Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance. A local attacker with privileges could potentially exploit this vulnerability, leading to the disclosure of certain service credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
References (1)
Core 1
Core References
Scores
CVSS v3
5.5
EPSS
0.0019
EPSS Percentile
8.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-522
CWE-256
Status
published
Products (1)
dell/powerprotect_data_manager_dm5500_firmware
< 5.14.0.0
Published
Dec 04, 2023
Tracked Since
Feb 18, 2026