CVE-2024-24900
CVSS 3.1 Score 5.8 of 10 (medium)
Details
Summary
CVE-2024-24900 is an improper authorization vulnerability found in Dell Secure Connect Gateway (SCG) Policy Manager, affecting all versions of the product. The vulnerability allows a low privileged attacker on an adjacent network to exploit it, potentially leading to unauthorized devices being added to policies. This could result in information disclosure and unauthorized access to the system. The base severity of this vulnerability is rated as MEDIUM, with a base score of 5.8 according to the CVSS:3.1 rating system. The attack vector is through an adjacent network and requires low privileges and user interaction. The impact score is 4.2, with high integrity impact and low confidentiality impact. Remediation measures should be taken promptly to address this vulnerability and prevent potential unauthorized access or information leakage within the affected organization's systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions