Relative Path Traversal in Dell SCG Appliance

Executive Summary

This vulnerability is a Relative Path Traversal issue in Dell SCG 5.0 Appliance versions before 5.36.00.16 and Dell SCG 5.0 Application versions before 5.36.00.00. It allows a low-privileged attacker with remote access to potentially execute remote commands by exploiting improper path validation.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to gain unauthorized access, execute malicious code, or manipulate system files. This may lead to data breaches, system compromise, or disruption of services if the attacker has network access to the vulnerable system.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR (data protection) and HIPAA (health data security) requirements. Non-compliance may result in legal penalties, fines, or reputational damage due to compromised sensitive information.

Useful 0 Not Useful 0

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the Relative Path Traversal vulnerability.

Useful 0 Not Useful 0