Vulnerability · Published Jun 28, 2024 · Assigned by HCL
CVE-2024-30111Missing Root Detection vulnerability affects DRYiCE AEX v10
Low 3.3
In plain English
A low-severity security flaw in DRYiCE AEX from HCL Software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 25% of all known vulnerabilities).
Severity (CVSS 3.1)3.3Low
Exploit odds (30 days)0.3%top 74.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breaches or other malicious activities.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HCL Software | DRYiCE AEX | 10 |
Weakness: CWE-1326 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N