{"id":"CVE-2026-70414","title":"Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability","summary":"Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.","severity":"medium","cvss":5.5,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-256"],"vendor":"Dell","product":"Command | Configure (DCC)","affected":["command_configure_dcc < 5.2.3.35"],"published":"2026-10-06","updated":"2026-10-06","sourceUpdated":"2026-10-06T19:58:37.060","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-70414","references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000502471/dsa-2026-378-security-update-for-dell-command-configure-for-multiple-vulnerabilities","label":"security_alert@emc.com"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-10-06T19:13:33.855Z","slug":"CVE-2026-70414","body":"## Overview\n\nDell Command | Configure (DCC), versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":30.3,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}