Plain-text Password Storage Vulnerability in Dell DM5500 Appliances

CVE-2023-44300

Summary

In the Dell DM5500 version 5.14.0.0, a vulnerability exists in the PPOE component that allows storage of user passwords in plain text. This flaw may be exploited by a local attacker who has gained certain privileges, resulting in the potential disclosure of sensitive user credentials. Once exposed, these credentials could be leveraged to gain unauthorized access to the application at the same privilege level as the compromised account, posing significant risks to data security and application integrity.

References