Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-22457

Опубликовано: 01 мар. 2024
Источник: nvd
CVSS3: 7.1
CVSS3: 8.8
EPSS Низкий

Описание

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fake self-signed certificate and communicating with the remote server.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dell:secure_connect_gateway:5.20.00.10:*:*:*:*:*:*:*

EPSS

Процентиль: 75%
0.00873
Низкий

7.1 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 7.1
github
почти 2 года назад

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fake self-signed certificate and communicating with the remote server.

EPSS

Процентиль: 75%
0.00873
Низкий

7.1 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-290