CVE-2024-24900

Summary

CVE-2024-24900 is a newly disclosed vulnerability affecting Dell Secure Connect Gateway (SCG) Policy Manager. This issue involves inadequate authorization controls, allowing a low-privileged adjacent network attacker to potentially add unauthorized devices to policies. The exploitation of this vulnerability could result in significant consequences, including information disclosure and unauthorized access to the system. It is recommended that users update their Dell SCG Policy Manager software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.