PT-2025-7824 · Dell · Dell Secure Connect Gateway

Saltedfish · Published 2025-02-25 · Updated 2026-01-21 · CVE-2024-51539

Positive Technologies (AI Summary)

CVSS v3.1

2.3

Low

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway (SCG) Application and Appliance versions prior to 5.28

Description The issue is due to improper neutralization of special elements used in an SQL command, leading to a SQL injection vulnerability. This can be exploited locally on the affected system by a high-privilege attacker, potentially resulting in the disclosure of non-sensitive information that does not include any customer data.

Recommendations For versions prior to 5.28, update to version 5.28 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-08295

CVE-2024-51539

Affected Products

Dell Secure Connect Gateway

References · 6

• https://bdu.fstec.ru/vul/2025-08295 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-51539 · Security Note
• https://osv.dev/vulnerability/CVE-2024-51539 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000289550/dsa-2024-464-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerability · Vendor Advisory
• https://t.me/cveNotify/149480 · Telegram Post
• https://twitter.com/CVEnew/status/1894384445127340378 · Twitter Post