CVE-2024-30111

Description

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breaches or other malicious activities.

CVSS v3.1 Score

3.3

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness Type (CWE)

CWE-1326 CWE-1326

Affected Products

Vendor	Product	Versions
hcltech	dryice_aex	All

References

Advisories & Patches

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193 https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0114193

Frequently Asked Questions

What is CVE-2024-30111? +

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breaches or other malicious activities. It has a CVSS v3.1 base score of 3.3 (LOW).

How severe is CVE-2024-30111? +

CVE-2024-30111 has a CVSS v3.1 score of 3.3 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2024-30111? +

CVE-2024-30111 affects products from hcltech, specifically: dryice_aex. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-30111? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-34503

Deck Mate 1 executes firmware directly from an external EEPROM without verifying authenticity or integrity. An attacker with physical access …

CVE-2025-34502

Deck Mate 2 lacks a verified secure-boot chain and runtime integrity validation for its controller and display modules. Without cryptographic …

CVE-2025-2762 7.8

CarlinKit CPC200-CCPA Missing Root of Trust Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected …

CVE-2024-8357 7.8

Visteon Infotainment App SoC Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers …

CVE-2025-5834 7.8

Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to bypass …

CVE-2024-32742 7.6

A vulnerability has been identified in SIMATIC CN 4100 (All versions < V3.0). The affected device contains an unrestricted USB …