CVE-2022-34440

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the system to gain admin privileges.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security_alert@emc.com

Published

2023-01-11

Last modified

2025-04-08

Weaknesses

CWE-321, CWE-798

Affected products

• Policy Manager For Secure Connect Gateway (Dell)
• Secure Connect Gateway Scg Policy Manager (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000204995/dsa-2022-273-dell-secure-connect-gateway-policy-manager-security-upd…