PT-2024-32935 · Dell · Dell Secure Connect Gateway (Scg) 5.0 Appliance

Published 2024-10-18 · Updated 2024-12-13 · CVE-2024-48016

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version 5.24

Description The issue is related to the use of a broken or risky cryptographic algorithm, which could be exploited by a low-privileged attacker with remote access, potentially leading to information disclosure. The attacker may use exposed credentials to access the system with the privileges of the compromised account.

Recommendations For version 5.24, patch immediately to address the vulnerability and review encryption practices to ensure the use of secure cryptographic algorithms. As a temporary workaround, consider restricting access to sensitive data and reviewing account privileges to minimize the risk of exploitation.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2024-48016

Affected Products

Dell Secure Connect Gateway (Scg) 5.0 Appliance

References · 8

• https://osv.dev/vulnerability/CVE-2024-48016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48016 · Security Note
• https://dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://twitter.com/CVEnew/status/1847325576853688706 · Twitter Post
• https://twitter.com/oktsec/status/1847361487523950675 · Twitter Post
• https://t.me/cvenotify/104181 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1847354024388894925 · Twitter Post
• https://t.me/cvedetector/8332 · Telegram Post