CVE-2024-24900
CVE-2024-24900
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
01 Mar 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized devices added to policies. Exploitation may lead to information disclosure and unauthorized access to the system.
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N
Affected products
Dell · Secure Connect Gateway (SCG) Policy ManagerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →