Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
PowerConnect 8024
Vendor
Dell EMC
Product
PowerConnect 8024
Platforms
Unknown
Default status
Unknown
PowerConnect 8024 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
5.1.15.2
Unavailable
None listed
PowerConnect 7000
Vendor
Dell EMC
Product
PowerConnect 7000
Platforms
Unknown
Default status
Unknown
PowerConnect 7000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
5.1.15.2
Unavailable
None listed
PowerConnect M6348
Vendor
Dell EMC
Product
PowerConnect M6348
Platforms
Unknown
Default status
Unknown
PowerConnect M6348 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
5.1.15.2
Unavailable
None listed
PowerConnect M6220
Vendor
Dell EMC
Product
PowerConnect M6220
Platforms
Unknown
Default status
Unknown
PowerConnect M6220 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
5.1.15.2
Unavailable
None listed
PowerConnect M8024
Vendor
Dell EMC
Product
PowerConnect M8024
Platforms
Unknown
Default status
Unknown
PowerConnect M8024 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
5.1.15.2
Unavailable
None listed
PowerConnect M8024-K
Vendor
Dell EMC
Product
PowerConnect M8024-K
Platforms
Unknown
Default status
Unknown
PowerConnect M8024-K · Scoped product and version facts