Default credentials

2023-12-0409:15:00

PRIOn knowledge base

www.prio-n.com

dell dm5500 plain-text password storage local attacker vulnerability disclosure compromised account

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance. A local attacker with privileges could potentially exploit this vulnerability, leading to the disclosure of certain service credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

CPENameOperatorVersion
powerprotect_data_manager_dm5500_firmwarele5.14.0.0

CPE	Name	Operator	Version
	powerprotect_data_manager_dm5500_firmware	le	5.14.0.0

References

www.dell.com/support/kbdoc/en-us/000220107/dsa-2023-425-security-update-for-dell-powerprotect-data-manager-dm5500-appliance-for-multiple-vulnerabilities