CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10
Attackers can install the mobile app on rooted devices, bypassing security checks to gain unauthorized access and potentially breach data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-30111?
CVE-2024-30111 is a low-severity vulnerability in HCL Software DRYiCE AEX, published on 28 Jun 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breaches or other malicious activities.
Weakness: CWE-1326
Which versions are affected by CVE-2024-30111?
It affects 1 product.
Products include Hcltech Dryice Aex.
How do I fix CVE-2024-30111?
No fix has been published for CVE-2024-30111 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-30111 being exploited?
There is no known exploitation of CVE-2024-30111 in the wild and no public exploit code.
Other vulnerabilities in HCL Software DRYiCE AEX
Sources
Also known as GHSA-6crx-c7g6-f3m8.