5.8
CVE-2025-23382
- EPSS 0.3%
- Veröffentlicht 19.03.2025 15:20:04
- Zuletzt bearbeitet 20.05.2025 18:01:47
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, contain(s) an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.c
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Secure Connect Gateway Version5.26.00.20 SwEditionvirtual
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.536 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.8 | 1.3 | 4 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N
|
| security_alert@emc.com | 5.5 | 1.3 | 3.7 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
|
CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere
The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.