PT-2024-19436 · Dell · Dell Secure Connect Gateway

Published 2024-03-01 · Updated 2024-12-04 · CVE-2024-22458

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway version 5.18

Description The issue is related to inadequate encryption strength, which could be exploited by an unauthenticated network attacker to recover plaintext from a block of ciphertext.

Recommendations For Dell Secure Connect Gateway version 5.18, update to a version that addresses the inadequate encryption strength issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2024-22458

Affected Products

Dell Secure Connect Gateway

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2024-22458 · Security Note
• https://osv.dev/vulnerability/CVE-2024-22458 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000222433/dsa-2024-076-security-update-for-dell-secure-connect-gateway-appliance-vulnerabilities · Vendor Advisory
• https://t.me/cvenotify/72755 · Telegram Post