Skip to content
Fencer Intel
high 7.2

CVE-2019-3753 json

Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password…

published 2019-08-20 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-13388

cvss
7.2
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 51%
public exploits
0
none known

Summary

Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.

Patch / fix

  • Dell EMC PowerConnect 8024 5.1.15.2
  • Dell EMC PowerConnect 7000 5.1.15.2
  • Dell EMC PowerConnect M6348 5.1.15.2
  • Dell EMC PowerConnect M6220 5.1.15.2
  • Dell EMC PowerConnect M8024 5.1.15.2
  • Dell EMC PowerConnect M8024-K 5.1.15.2

Exploit prediction

0.65% chance of exploitation in the next 30 days, higher than 51% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
CNA 3.0 7.2 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
NVD 2.0 4.0 AV:N/AC:L/Au:S/C:P/I:N/A:N

Affected products

  • Dell EMC PowerConnect 8024
  • Dell EMC PowerConnect 7000
  • Dell EMC PowerConnect M6348
  • Dell EMC PowerConnect M6220
  • Dell EMC PowerConnect M8024
  • Dell EMC PowerConnect M8024-K

Classification

Weakness
  • CWE-312 Cleartext Storage of Sensitive Information
  • CWE-522 Insufficiently Protected Credentials

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.