CVE-2026-70414

Undergoing Analysis Undergoing Analysis - In Progress

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-13

Assigner: Dell

Description

Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-06

EPSS Evaluated

2026-10-18

NVD

CVE-2026-70414

EUVD

EUVD-2026-93656

Affected Vendors & Products

Vendor	Product	Version / Range
dell	command\|configure	to 5.2.3.35 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-256	The product stores a password in plaintext within resources such as memory or files.

Attack-Flow Graph

Executive Summary

Dell Command | Configure (DCC) versions before 5.2.3.35 store passwords in plaintext. A low-privileged attacker with local access could read these passwords, leading to unauthorized information disclosure.

Detection Guidance

To detect this vulnerability, check the installed version of Dell Command | Configure (DCC) on your system. If the version is prior to 5.2.3.35, it is vulnerable. Run commands like 'wmic product get name, version' on Windows or 'dpkg -l | grep dcc' on Linux to verify the version.

Impact Analysis

An attacker could gain access to sensitive system information by exploiting this flaw, potentially leading to further attacks or data breaches if credentials are reused.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements in GDPR and HIPAA, potentially resulting in legal penalties or compliance failures.

Mitigation Strategies

Update Dell Command | Configure (DCC) to version 5.2.3.35 or later to address the Plaintext Storage of Password vulnerability.

Hi! I’m here to help you understand CVE-2026-70414. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70