VULNERABILITY INTELLIGENCE

CVE-2024-24900

CVSS score5.8 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2024-03-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N

Description

Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized devices added to policies. Exploitation may lead to information disclosure and unauthorized access to the system.

Weakness classification

  • security_alert@emc.com: CWE-285
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references