CVE-2023-39252: Medium severity dell emc secure connect gateway policy manager vulnerability

Published Sep 21, 2023

Updated

Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information.

Affected Software

2 affected components

Dell Secure Connect Gateway Policy Manager=5.16.00.14

Dell Policy Manager For Secure Connect Gateway=5.16.00.14

Remediation

Patch Available

https://www.dell.com/support/kbdoc/en-us/000217683/dsa-2023-321-security-update-for-dell-secure-connect-gateway-security-policy-manager-vulnerabilities

Event History

Sep 21, 2023

CVE Published

via MITRE·05:32 AM

Data Sourced

via MITRE·05:32 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for the Dell SCG Policy Manager vulnerability?

The vulnerability ID for the Dell SCG Policy Manager vulnerability is CVE-2023-39252.

What is the severity of CVE-2023-39252?

The severity of CVE-2023-39252 is medium, with a severity value of 5.9.

How does CVE-2023-39252 affect Dell SCG Policy Manager?

CVE-2023-39252 affects Dell SCG Policy Manager 5.16.00.14 by exposing a broken cryptographic algorithm vulnerability.

How can CVE-2023-39252 be exploited?

CVE-2023-39252 can be exploited by remote unauthenticated attackers through man-in-the-middle (MitM) attacks to obtain sensitive information.

Is there a security update available for CVE-2023-39252?

Yes, there is a security update available for CVE-2023-39252. Please refer to the Dell support website for more information.