Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
References
| Link | Resource |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000502471/dsa-2026-378-security-update-for-dell-command-configure-for-multiple-vulnerabilities | Patch Vendor Advisory |
Configurations
History
13 Oct 2026, 18:55
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:dell:command\|configure:*:*:*:*:*:*:*:* | |
| First Time |
Dell command\|configure
Dell |
|
| References | () https://www.dell.com/support/kbdoc/en-us/000502471/dsa-2026-378-security-update-for-dell-command-configure-for-multiple-vulnerabilities - Patch, Vendor Advisory |
06 Oct 2026, 19:18
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-10-06 19:18
Updated : 2026-10-13 18:55
NVD link : CVE-2026-70414
Mitre link : CVE-2026-70414
CVE.ORG link : CVE-2026-70414
JSON object : View
Products Affected
dell
- command\|configure
CWE
CWE-256
Plaintext Storage of a Password