1. Home
  2. CVE Database
  3. CVE-2024-51539
LOW · 2.3

CVE-2024-51539

The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL comman...

Vulnerability Description

The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attacker with access to the system could potentially exploit this vulnerability, leading to the disclosure of non-sensitive information that does not include any customer data.

CVSS Score

2.3

LOW

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
DellSecure Connect Gateway< 5.28.00.00

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2024-51539?

CVE-2024-51539 is a vulnerability with a CVSS score of 2.3 (LOW). The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL comman...

How severe is CVE-2024-51539?

CVE-2024-51539 has been rated LOW with a CVSS base score of 2.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-51539?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Secure Connect Gateway.