CyberRota Analysis
AI-GeneratedDell SCG 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00, respectively, are vulnerable to an Insufficient Verification of Data Authenticity flaw that allows unauthenticated remote attackers to gain unauthorized ADMIN access and refresh tokens. The lack of nonce validation or request time limits enables repeated exploitation, posing a significant security risk. Organizations using these affected products should prioritize upgrading to the latest versions to mitigate this critical vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This vulnerability is considered critical as an unauthenticated attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens. Since there is no nonce validation or time limit on requests, the attack can be performed indefinitely. Dell recommends customers to upgrade at the earliest opportunity
Related CVEs
Other vulnerabilities affecting the same vendor(s)