CVE-2024-39575

Tuesday, June 16, 2026

7.4

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:H

Summary

update_disk_psu_baseline.sh requires password in plain text

Affected Software

Vendor	Product	Version Range	Status
Dell	Dell EMC VxRail Appliance	`0 < 7.0.520`	affected

Weaknesses

CWE-256: CWE-256: Plaintext Storage of a Password

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: partial

References

https://www.dell.com/support/kbdoc/en-us/000226270/dsa-2024-247-security-update-for-dell-vxrail-7-0-520-multiple-third-party-component-vulnerabilities

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.