Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f243-ccrf-jc6c

Опубликовано: 01 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fake self-signed certificate and communicating with the remote server.

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fake self-signed certificate and communicating with the remote server.

EPSS

Процентиль: 75%
0.00873
Низкий

7.1 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 7.1
nvd
почти 2 года назад

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fake self-signed certificate and communicating with the remote server.

EPSS

Процентиль: 75%
0.00873
Низкий

7.1 High

CVSS3

Дефекты

CWE-290