CVE-2024-30119: hcl software dryice optibot reset station Insufficiently Protected Credentials
CVSS: 3.7v3.1LowDeferred
Published 14-06-2024Last modified 02-08-2024
Vulnerability summary
CVE-2024-30119 is a low (CVSS 3.7) Insufficiently Protected Credentials vulnerability in hcl software dryice optibot reset station. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.1% of scored vulnerabilities.
CVSS score
3.7/10
010
Low · v3.1 (CVE.org)EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 14-06-2024PublishedVulnerability first disclosed.
- 02-08-2024Last modifiedVulnerability information updated.
Description
HCL DRYiCE Optibot Reset Station is impacted by a missing Strict Transport Security Header. This could allow an attacker to intercept or manipulate data during redirection.
CVSS metrics
2 scores · 2 sources · 1 versionLow 3.7Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NSourcesAll 2 agree
- NVDNIST3.7LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS trend
Probability
0.20%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
0.00 pp
From 0.20% on 19-09-2026
19-09-202619-10-2026
EPSS score0.20%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-522Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
- CWE-326Inadequate Encryption StrengthThe product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
Affected systems
Hcl software1 product
- dryice optibot reset station1.0, 2.0
1 vendor · 1 product