VULNERABILITY INTELLIGENCE
CVE-2024-30111
CVSS score3.3 LOW
EPSS probability0.32%
CISA KEVNot currently listed
Published2024-06-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Description
HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breaches or other malicious activities.
Weakness classification
- psirt@hcl.com: CWE-1326
Primary references
- psirt@hcl.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory