Approved changes feed: RSS · Atom

cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductSecure Connect Gateway (58c50e1c-2654-52e8-93b3-d342910eb948)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27101 vulnerable 2026-06-08 07:53:21.920497 Details available
MEDIUM (4.7)
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.
Published: 2026-04-01T07:27:49.317Z
Updated: 2026-04-02T03:55:54.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29168 vulnerable 2026-06-08 06:33:28.880586 Details available
MEDIUM (5.4)
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.
Published: 2024-06-13T15:09:31.764Z
Updated: 2024-08-02T01:10:54.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28969 vulnerable 2026-06-08 06:33:28.248640 Details available
MEDIUM (4.3)
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal update REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an unauthorized user access to restricted resources.
Published: 2024-06-13T15:05:01.940Z
Updated: 2024-08-02T01:03:51.512Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28968 vulnerable 2026-06-08 06:33:28.247893 Details available
MEDIUM (5.4)
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for internal email and collection settings REST APIs (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an unauthorized user access to restricted resources and change of state.
Published: 2024-06-13T15:01:22.196Z
Updated: 2024-08-02T01:03:51.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28967 vulnerable 2026-06-08 06:33:28.247275 Details available
MEDIUM (5.4)
Dell SCG, versions prior to 5.24.00.00, contain an Improper Access Control vulnerability in the SCG exposed for an internal maintenance REST API (if enabled by Admin user from UI). A remote low privileged attacker could potentially exploit this vulnerability, leading to the execution of certain APIs applicable only for Admin Users on the application's backend database that could potentially allow an unauthorized user access to restricted resources and change of state.
Published: 2024-06-13T14:57:23.532Z
Updated: 2024-08-02T01:03:51.273Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28966 vulnerable 2026-06-08 06:33:28.244028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-28965 vulnerable 2026-06-08 06:33:28.243381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24907 vulnerable 2026-06-08 06:29:41.992536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24906 vulnerable 2026-06-08 06:29:41.992134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24905 vulnerable 2026-06-08 06:29:41.991629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24904 vulnerable 2026-06-08 06:29:41.990894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24903 vulnerable 2026-06-08 06:29:41.990389 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-24900 vulnerable 2026-06-08 06:29:41.987317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22457 vulnerable 2026-06-08 06:29:35.803083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44294 vulnerable 2026-06-08 06:12:39.936549 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44293 vulnerable 2026-06-08 06:12:39.935736 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28043 vulnerable 2026-06-08 06:01:07.788828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.