ID
VAR-202502-2173
CVE
CVE-2024-51539
TITLE
Dell's secure connect gateway In SQL Injection vulnerability
Trust: 0.8
DESCRIPTION
The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attacker with access to the system could potentially exploit this vulnerability, leading to the disclosure of non-sensitive information that does not include any customer data. However, the information handled by the software will not be rewritten. Furthermore, the software will not stop. Furthermore, attacks that exploit this vulnerability will not affect other software
Trust: 1.62
AFFECTED PRODUCTS
| vendor: | dell | model: | secure connect gateway | scope: | lt | version: | 5.28.00.00 | Trust: 1.0 |
| vendor: | デル | model: | secure connect gateway | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | デル | model: | secure connect gateway | scope: | - | version: | - | Trust: 0.8 |
| vendor: | デル | model: | secure connect gateway | scope: | eq | version: | 5.28.00.00 | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-89 | Trust: 1.0 |
| problemtype: | SQL injection (CWE-89) [ others ] | Trust: 0.8 |
PATCH
| title: | DSA-2024-464 | url: | https://www.dell.com/support/kbdoc/en-us/000289550/dsa-2024-464-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerability | Trust: 0.8 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-51539 | Trust: 2.6 |
| db: | JVNDB | id: | JVNDB-2025-025120 | Trust: 0.8 |
REFERENCES
| url: | https://www.dell.com/support/kbdoc/en-us/000289550/dsa-2024-464-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerability | Trust: 1.0 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2024-51539 | Trust: 0.8 |
SOURCES
| db: | JVNDB | id: | JVNDB-2025-025120 |
| db: | NVD | id: | CVE-2024-51539 |
LAST UPDATE DATE
2026-01-24T23:48:16.395000+00:00
SOURCES UPDATE DATE
| db: | JVNDB | id: | JVNDB-2025-025120 | date: | 2026-01-23T05:20:00 |
| db: | NVD | id: | CVE-2024-51539 | date: | 2026-01-21T22:02:45.997 |
SOURCES RELEASE DATE
| db: | JVNDB | id: | JVNDB-2025-025120 | date: | 2026-01-23T00:00:00 |
| db: | NVD | id: | CVE-2024-51539 | date: | 2025-02-25T14:15:31.153 |