PT-2024-27932 · Dell · Dell Edge Gateway 5200+1

Published 2024-11-21 · Updated 2024-12-09 · CVE-2024-38296

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell Edge Gateway 3200 versions prior to 15.40.30.2879 Dell Edge Gateway 5200 versions prior to 12.0.94.2380

Description The issue is related to an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution. A high privileged attacker with local access could potentially exploit this, leading to information exposure.

Recommendations For Dell Edge Gateway 3200 versions prior to 15.40.30.2879, update to version 15.40.30.2879 or later. For Dell Edge Gateway 5200 versions prior to 12.0.94.2380, update to version 12.0.94.2380 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-1421

Related Identifiers

BDU:2025-02255

CVE-2024-38296

Affected Products

Dell Edge Gateway 3200

Dell Edge Gateway 5200

References · 6

• https://osv.dev/vulnerability/CVE-2024-38296 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38296 · Security Note
• https://bdu.fstec.ru/vul/2025-02255 · Security Note
• https://dell.com/support/kbdoc/en-us/000250949/dsa-2024-345-security-update-for-dell-networking-edge-gateway-5200-vulnerability · Vendor Advisory
• https://vuldb.com/?id.285755 · Note
• https://twitter.com/CVEnew/status/1859820184678084775 · Twitter Post