CVE-2024-29169 MEDIUM

CVE-2024-29169

Vendor Dell
Product Secure Connect Gateway-Application
Weakness CWE-89 · SQLi
Published June 13, 2024
Last update August 27, 2025
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.

Key dates

02Disclosure timeline

June 13, 2024 CVE published
August 27, 2025 Record updated