CVSS 3.1 Score 5.8 of 10 (medium)


Published Mar 1, 2024
CWE ID 285


CVE-2024-24900 is an improper authorization vulnerability found in Dell Secure Connect Gateway (SCG) Policy Manager, affecting all versions of the product. The vulnerability allows a low privileged attacker on an adjacent network to exploit it, potentially leading to unauthorized devices being added to policies. This could result in information disclosure and unauthorized access to the system. The base severity of this vulnerability is rated as MEDIUM, with a base score of 5.8 according to the CVSS:3.1 rating system. The attack vector is through an adjacent network and requires low privileges and user interaction. The impact score is 4.2, with high integrity impact and low confidentiality impact. Remediation measures should be taken promptly to address this vulnerability and prevent potential unauthorized access or information leakage within the affected organization's systems.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-24900 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options