Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-29168

Опубликовано: 13 июн. 2024
Источник: nvd
CVSS3: 5.4
CVSS3: 8.8
EPSS Низкий

Описание

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:*:*:*:*
Версия от 5.18.00.20 (включая) до 5.22.00.18 (включая)

EPSS

Процентиль: 85%
0.02486
Низкий

5.4 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 5.4
github
больше 1 года назад

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.

EPSS

Процентиль: 85%
0.02486
Низкий

5.4 Medium

CVSS3

8.8 High

CVSS3

Дефекты

CWE-89