Vulnerability Details CVE-2024-29168
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.8%
CVSS Severity
CVSS v3 Score 5.4
References
- https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities
Products affected by CVE-2024-29168
-
cpe:2.3:a:dell:secure_connect_gateway:5.18.00.20
-
cpe:2.3:a:dell:secure_connect_gateway:5.20.00.00
-
cpe:2.3:a:dell:secure_connect_gateway:5.20.00.10
-
cpe:2.3:a:dell:secure_connect_gateway:5.22.00.00
-
cpe:2.3:a:dell:secure_connect_gateway:5.22.00.16
-
cpe:2.3:a:dell:secure_connect_gateway:5.22.00.18