7.1
High
CVE-2024-22457 Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path
Description
Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. A remote low privileged attacker could potentially exploit this vulnerability, leading to impersonation of the server through presenting a fake self-signed certificate and communicating with the remote server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Secure Connect Gateway (SCG) 5.0 Appliance - SRS | 5.20.00.10 | No fix stated |
| secure_connect_gateway | 5.20.00.10 | No fix stated |
Other CVEs of Secure Connect Gateway (SCG) 5.0 Appliance - SRS
The 8 CVEs of Secure Connect Gateway (SCG) 5.0 Appliance - SRS →
CVE-2025-23382
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, contain(s) an Exposure of Sensitive System…
5.5
Medium
CVE-2025-26475
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, Enables Live-Restore setting which enhances…
5.5
Medium
CVE-2024-48016
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky…
4.6
Medium
CVE-2024-47241
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation…
5.5
Medium