CVE-2026-80171: CWE-331: Insufficient Entropy in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 1% of CVEs
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until an official fix is released, limit local access to trusted users only and monitor for suspicious activity. Follow Dell's security advisories for updates on patches or mitigations.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Summary
CVE-2026-80171 describes an insufficient entropy issue in the PRNG used by Dell Secure Connect Gateway 5.0 Appliance and Application. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected. The vulnerability could be exploited by a low privileged local attacker to elevate privileges. The CVSS v3.1 score is 4.7, reflecting a medium severity with local attack vector, high attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.
Impact
If exploited, this vulnerability could allow a low privileged local attacker to gain elevated privileges on the affected Dell SCG 5.0 systems. The confidentiality impact is high, meaning sensitive information could be exposed. There is no impact on integrity or availability. The attack requires local access and has high complexity, limiting the likelihood of exploitation.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.