CVE-2023-23695

Dell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dell:secure_connect_gateway:5.12.00.10:*:*:*:*:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:5.14.00.12:*:*:*:*:*:*:*

History

07 Nov 2023, 04:07

Type Values Removed Values Added
Summary Dell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information. Dell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by performing MitM attacks and let attackers obtain sensitive information.

25 Feb 2023, 04:18

Type Values Removed Values Added
CPE cpe:2.3:a:dell:secure_connect_gateway:5.14.00.12:*:*:*:*:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:5.12.00.10:*:*:*:*:*:*:*
CWE CWE-327
First Time Dell
Dell secure Connect Gateway
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.9
References (MISC) https://www.dell.com/support/kbdoc/en-us/000208462/dsa-2023-020-dell-secure-connect-gateway-security-update-for-multiple-vulnerabilities - (MISC) https://www.dell.com/support/kbdoc/en-us/000208462/dsa-2023-020-dell-secure-connect-gateway-security-update-for-multiple-vulnerabilities - Vendor Advisory

17 Feb 2023, 12:52

Type Values Removed Values Added
New CVE

Information

Published : 2023-02-17 07:15

Updated : 2023-12-10 14:48


NVD link : CVE-2023-23695

Mitre link : CVE-2023-23695

CVE.ORG link : CVE-2023-23695


JSON object : View

Products Affected

dell

  • secure_connect_gateway
CWE
CWE-327

Use of a Broken or Risky Cryptographic Algorithm