Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-29169

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.

Published

2024-06-13T16:15:10.610

Last Modified

2025-09-30T18:02:10.763

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses

Type: Secondary
CWE-89

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	dell	secure_connect_gateway	< 5.24.00.14	Yes
Application	dell	secure_connect_gateway	< 5.24.00.14	Yes

References

https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities Vendor Advisory ([email protected])
https://www.dell.com/support/kbdoc/en-us/000225910/dsa-2024-181-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)