- Description
- Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.
- Source
- security_alert@emc.com
- NVD status
- Analyzed
- Products
- secure_connect_gateway
CVSS 3.1
- Type
- Secondary
- Base score
- 5.3
- Impact score
- 1.4
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Severity
- MEDIUM
- security_alert@emc.com
- CWE-77
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*",
"matchCriteriaId": "7978D545-2FDA-4B19-B0A5-F87E87EE8A59",
"versionEndExcluding": "5.36.00.00",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*",
"matchCriteriaId": "D6766A93-993A-40A7-9766-F830A1AE4C80",
"versionEndExcluding": "5.36.00.16",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]