CVE-2023-44293 - In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API

Back Back to CVE browser

MEDIUM

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API

Published Feb 14, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.44%

Description

In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially lead to unintentional information disclosure from the product database.

Affected products

Vendor Dell Product Secure Connect Gateway-Appliance Default
unaffected
- Version
  v5.10.00.00
  Status
  affected
  Constraints
  <=v5.18.00.00
Vendor Dell Product Secure Connect Gateway-Application Default
unaffected
- Version
  v5.10.00.00
  Status
  affected
  Constraints
  <=v5.18.00.00

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Secure Connect Gateway-Appliance

unaffected

Version	Status	Constraints
v5.10.00.00	affected	<=v5.18.00.00

Dell

Secure Connect Gateway-Application

unaffected

Version	Status	Constraints
v5.10.00.00	affected	<=v5.18.00.00

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (1)

https://www.dell.com/support/kbdoc/en-us/000219372/dsa-2023-403-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://www.dell.com/support/kbdoc/en-us/000219372/dsa-2023-403-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities		vendor-advisoryVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published Feb 14, 2024

Updated Aug 10, 2024

Reserved Sep 28, 2023

Link CVE-2023-44293

CISA Vulnrichment

Updated Aug 10, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-44293

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-44293