CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breaches or other malicious activities.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193	Vendor Advisory
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hcltech:dryice_aex:10.0:*:*:*:*:*:*:*

History

30 Oct 2025, 18:43

Type	Values Removed	Values Added
References	~~() https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193 -~~	() https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193 - Vendor Advisory
First Time		Hcltech Hcltech dryice Aex
CPE		cpe:2.3:a:hcltech:dryice_aex:10.0:::::::*

Information

Published : 2024-06-28 07:15

Updated : 2025-10-30 18:43

NVD link : CVE-2024-30111

Mitre link : CVE-2024-30111

CVE.ORG link : CVE-2024-30111

JSON object : View

Products Affected

hcltech

dryice_aex

CWE

CWE-1326

Missing Immutable Root of Trust in Hardware

{"id": "CVE-2024-30111", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@hcl.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-06-28T07:15:05.473", "references": [{"url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193", "tags": ["Vendor Advisory"], "source": "psirt@hcl.com"}, {"url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@hcl.com", "description": [{"lang": "en", "value": "CWE-1326"}]}], "descriptions": [{"lang": "en", "value": "HCL DRYiCE AEX product is impacted by Missing\nRoot Detection vulnerability in the mobile application. The mobile app can be installed in the rooted\ndevice due to which malicious users can gain unauthorized access to the rooted\ndevices, compromising security and potentially leading to data breaches or\nother malicious activities."}, {"lang": "es", "value": "El producto HCL DRYiCE AEX se ve afectado por una vulnerabilidad de detecci\u00f3n de ra\u00edz faltante en la aplicaci\u00f3n m\u00f3vil. La aplicaci\u00f3n m\u00f3vil se puede instalar en el dispositivo rooteado, debido a que los usuarios malintencionados pueden obtener acceso no autorizado a los dispositivos rooteados, comprometiendo la seguridad y potencialmente provocando violaciones de datos u otras actividades maliciosas."}], "lastModified": "2025-10-30T18:43:57.520", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hcltech:dryice_aex:10.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB374CFE-9DFA-4891-B97F-8FFC19EF25BB"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@hcl.com"}