{"schemaVersion":3,"id":"CVE-2019-3753","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.","dates":{"published":"2019-08-20T18:47:01.835Z","modified":"2024-09-16T20:48:15.827Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.2,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"CVE.org","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":7.2,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":7.2,"severity":"high","vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4,"severity":"medium","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00649,"percentile":0.50175,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00649},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00649,"percentile":0.50175}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00649,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00649,"percentile":0.50175}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-312","name":"Cleartext Storage of Sensitive Information","description":"The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/312.html"},{"id":"CWE-522","name":"Insufficiently Protected Credentials","description":"The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.","type":"weakness","status":"Incomplete","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/522.html"}],"affected":[{"vendor":"dell emc","product":"powerconnect  m8024-k","name":"PowerConnect  M8024-K","label":"powerconnect  m8024-k","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 5.1.15.2","eol":null,"hubHref":"/vendor/dell_emc/powerconnect__m8024-k"},{"vendor":"dell emc","product":"powerconnect 7000","name":"PowerConnect 7000","label":"powerconnect 7000","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 5.1.15.2","eol":null,"hubHref":"/vendor/dell_emc/powerconnect_7000"},{"vendor":"dell emc","product":"powerconnect 8024","name":"PowerConnect 8024","label":"powerconnect 8024","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 5.1.15.2","eol":null,"hubHref":"/vendor/dell_emc/powerconnect_8024"},{"vendor":"dell emc","product":"powerconnect m6220","name":"PowerConnect M6220","label":"powerconnect m6220","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 5.1.15.2","eol":null,"hubHref":"/vendor/dell_emc/powerconnect_m6220"},{"vendor":"dell emc","product":"powerconnect m6348","name":"PowerConnect M6348","label":"powerconnect m6348","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 5.1.15.2","eol":null,"hubHref":"/vendor/dell_emc/powerconnect_m6348"},{"vendor":"dell emc","product":"powerconnect m8024","name":"PowerConnect M8024","label":"powerconnect m8024","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ unspecified, < 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ unspecified, < 5.1.15.2","eol":null,"hubHref":"/vendor/dell_emc/powerconnect_m8024"},{"vendor":"dell","product":"emc_powerconnect_7000_firmware","name":"emc powerconnect 7000 firmware","label":"emc_powerconnect_7000_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.15.2","eol":null,"hubHref":"/vendor/dell/emc_powerconnect_7000"},{"vendor":"dell","product":"emc_powerconnect_8024_firmware","name":"emc powerconnect 8024 firmware","label":"emc_powerconnect_8024_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.15.2","eol":null,"hubHref":"/vendor/dell/emc_powerconnect_8024"},{"vendor":"dell","product":"emc_powerconnect_m6220_firmware","name":"emc powerconnect m6220 firmware","label":"emc_powerconnect_m6220_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.15.2","eol":null,"hubHref":"/vendor/dell/emc_powerconnect_m6220"},{"vendor":"dell","product":"emc_powerconnect_m6348_firmware","name":"emc powerconnect m6348 firmware","label":"emc_powerconnect_m6348_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.15.2","eol":null,"hubHref":"/vendor/dell/emc_powerconnect_m6348"},{"vendor":"dell","product":"emc_powerconnect_m8024_firmware","name":"emc powerconnect m8024 firmware","label":"emc_powerconnect_m8024_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.15.2","eol":null,"hubHref":"/vendor/dell/emc_powerconnect_m8024"},{"vendor":"dell","product":"emc_powerconnect_m8024-k_firmware","name":"emc powerconnect m8024-k firmware","label":"emc_powerconnect_m8024-k_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 5.1.15.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.1.15.2","eol":null,"hubHref":"/vendor/dell/emc_powerconnect_m8024-k"}],"affectedCount":12,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.dell.com/support/article/sln318359/","label":"www.dell.com/support/article/sln318359/","hostname":"www.dell.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2019-08-20T18:47:01.835Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T20:48:15.827Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":29,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:05:59.779Z","stale":false,"partial":false}}