High severity · published Oct 18, 2024
CVE-2024-48016
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability
8.8
CVSS
0.2%
EPSS
No
On KEV
Description
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure. The attacker may be able to use exposed credentials to access the system with privileges of the compromised account.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Secure Connect Gateway (SCG) 5.0 Appliance - SRS · Dell
5.24.00.14 · source: vendor
SC
Secure Connect Gateway · Dell
5.24.00.14 · source: NVD
Affected product
SC
Secure Connect Gateway (SCG) 5.0 Appliance - SRS
Dell
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-48016
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-48016
Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000237211/dsa-2024-407-dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities
More from Secure Connect Gateway (SCG) 5.0 Appliance - SRS
8.8
CVE-2024-22457
Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path
8.1
CVE-2024-47241
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability
6.3
CVE-2024-47240
Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability
5.8
CVE-2025-23382
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, contain(s) an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability
5.5
CVE-2025-26475
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, Enables Live-Restore setting which enhances security by keeping containers running during daemon restarts,…