CVE-2024-24903: high-severity vulnerability in Dell Secure Connect Gateway (SCG) Policy Manager
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8epss 0.4%
Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to the application with privileges of the compromised account. The attacker could retrieve the reset password token without authorization and then perform the password change.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Dell · Secure Connect Gateway (SCG) Policy ManagerRelated CVEs — Dell Secure Connect Gateway (SCG) Policy Manager
In the same product, most dangerous first.