CVE-2024-39575

Vulnerability

The update_disk_psu_baseline.sh script in Dell VxRail requires that an administrative password be provided in plain text, either as a command-line argument or within the script's execution context. This exposes the password to any local user with privileges to view running processes or script contents. The vulnerability affects Dell VxRail versions prior to the security update referenced in [1].

Exploitation

An attacker with local shell access to the VxRail appliance can observe the plain-text password by examining process listings (e.g., ps aux) or the script's invocation arguments. No additional privileges or user interaction beyond local access is required.

Impact

Successful exploitation allows the attacker to capture the administrative password for disk/PSU baseline operations. This credential could then be reused to gain elevated access to other VxRail components or management interfaces, leading to full system compromise.

Mitigation

Dell has released a security update for VxRail 7.0.520 that addresses this vulnerability. Users should apply the update as described in [1]. No workaround is available for unpatched versions.