High severity · published Jun 28, 2024
CVE-2024-30111
Missing Root Detection vulnerability affects DRYiCE AEX v10
7.5
CVSS
0.3%
EPSS
No
On KEV
Description
HCL DRYiCE AEX product is impacted by Missing
Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted
device due to which malicious users can gain unauthorized access to the rooted
devices, compromising security and potentially leading to data breaches or
other malicious activities.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DA
DRYiCE AEX · HCL Software
10 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-30111
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-30111
Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193
More from DRYiCE AEX
9.8
CVE-2024-30110
Lack of input validation vulnerability affects DRYiCE AEX v10
7.5
CVE-2024-30135
Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10
6.1
CVE-2024-30109
Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10