CVE-2022-34440: Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of…

PriorityP351critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.47%

37.3th percentile

Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the system to gain admin privileges.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
dell	policy_manager_for_secure_connect_gateway	>= 5.10.00.00 < 5.14.00.00	5.14.00.00
dell	secure_connect_gateway_policy_manager	>= 5.10 < 5.14	5.14

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.