CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2024-48016
https://notcve.org/view.php?id=CVE-2024-48016
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to use exposed credentials to access the system with privileges of the compromised account. • https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-47241
https://notcve.org/view.php?id=CVE-2024-47241
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access and modification of transmitted data. • https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities • CWE-295: Improper Certificate Validation •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2024-47240
https://notcve.org/view.php?id=CVE-2024-47240
Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with low privileges can access the file system and could potentially exploit this vulnerability to gain write access to unauthorized data and cause a version update failure condition. • https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities • CWE-276: Incorrect Default Permissions •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2024-22457
https://notcve.org/view.php?id=CVE-2024-22457
Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fake self-signed certificate and communicating with the remote server. Dell Secure Connect Gateway 5.20 contiene una vulnerabilidad de autenticación incorrecta durante la ruta de actualización de SRS a SCG. Un atacante remoto con pocos privilegios podría explotar esta vulnerabilidad, lo que llevaría a la suplantación del servidor mediante la presentación de un certificado autofirmado falso y la comunicación con el servidor remoto. • https://www.dell.com/support/kbdoc/en-us/000222433/dsa-2024-076-security-update-for-dell-secure-connect-gateway-appliance-vulnerabilities • CWE-290: Authentication Bypass by Spoofing •
CVSS: 3.7EPSS: 0%CPEs: 1EXPL: 0CVE-2024-22458
https://notcve.org/view.php?id=CVE-2024-22458
Dell Secure Connect Gateway, 5.18, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker could potentially exploit this vulnerability, allowing an attacker to recover plaintext from a block of ciphertext. Dell Secure Connect Gateway, versión 5.18, contiene una vulnerabilidad de potencia de cifrado inadecuada. Un atacante de red no autenticado podría explotar esta vulnerabilidad, permitiéndole recuperar texto plano de un bloque de texto cifrado. • https://www.dell.com/support/kbdoc/en-us/000222433/dsa-2024-076-security-update-for-dell-secure-connect-gateway-appliance-vulnerabilities • CWE-327: Use of a Broken or Risky Cryptographic Algorithm •