Hard-coded Password Vulnerability in Dell EMC SCG Policy Manager
CVE-2022-34462

7.8HIGH

Key Information:

Vendor

Dell
Status
Secure Connect Gateway (scg) Policy Manager
Vendor
CVE Published:
18 January 2023

What is CVE-2022-34462?

Dell EMC SCG Policy Manager versions 5.10 to 5.12 are susceptible to a vulnerability that involves hard-coded passwords. This security flaw could allow an attacker, who knows the hard-coded credentials, to gain unauthorized access and administrative privileges to the system. It is essential for users of affected versions to address this vulnerability promptly to safeguard their systems and data.

Affected Version(s)

Secure Connect Gateway (SCG) Policy Manager 5.10 < 5.12

References

https://www.dell.com/support/kbdoc/en-us/000204995/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.