CVE-2024-29168: SQL Injection
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell SCGto a version that resolves this vulnerability.Fixed in 5.22.00.00
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29168?
CVE-2024-29168 has been rated as a high severity vulnerability due to its potential for SQL injection exploitation.
How do I fix CVE-2024-29168?
To fix CVE-2024-29168, upgrade your Dell SCG software to version 5.22.00.00 or later.
What type of vulnerability is CVE-2024-29168?
CVE-2024-29168 is a SQL Injection vulnerability in the internal assets REST API of the Dell SCG UI.
What could an attacker do with CVE-2024-29168?
An authenticated remote attacker could exploit CVE-2024-29168 to execute arbitrary SQL commands on the application's backend database.
Which versions of Dell SCG are affected by CVE-2024-29168?
Dell SCG versions prior to 5.22.00.00 are affected by CVE-2024-29168.