Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) contain a vulnerability involving the use of a hard-coded cryptographic key. This flaw allows a low privileged attacker with local access to potentially disclose sensitive information. The vulnerability is classified as CWE-321 and has a medium severity with a CVSS score of 5.5. No official patch or remediation details are provided in the available data.
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an improper locking vulnerability (CWE-667). This flaw could allow a low privileged remote attacker to gain unauthorized filesystem access. The vulnerability has a CVSS 3.1 score of 6.5, indicating medium severity. No official patch or remediation details are provided in the available data.
Dell Secure Connect Gateway (SCG) 5.0 Application versions prior to 5.36.00.00 and Appliance versions prior to 5.36.00.16 contain an improper certificate validation vulnerability. This flaw allows a low privileged attacker with local access to potentially exploit server-side request forgery. The vulnerability is identified as CWE-295 and has a CVSS 3.1 score of 5.5, indicating medium severity. No official patch or remediation details are provided in the available data.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage of Sensitive Information vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Dell Secure Connect Gateway (SCG) 5.0 Application versions prior to 5.36.00.00 contain an OS Command Injection vulnerability (CWE-78). This flaw allows a high privileged attacker with remote access to potentially execute arbitrary OS commands, leading to elevation of privileges. The vulnerability is rated high severity with a CVSS score of 7.2. No explicit patch information is provided in the input data.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 for the appliance and prior to 5.36.00.00 for the application contain a vulnerability involving improper validation of certificates with host mismatches. This flaw could allow an unauthenticated remote attacker to bypass protection mechanisms. The vulnerability is identified as CWE-297 and has a medium severity with a CVSS score of 4.8.
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 for the appliance and prior to 5.36.00.00 for the application contain an improper certificate validation vulnerability. This flaw allows an unauthenticated remote attacker to potentially bypass protection mechanisms. The vulnerability is identified as CWE-295 and has a CVSS 3.1 base score of 7.3, indicating high severity. No official patch links are provided in the available data.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain a Use of Incorrect Operator vulnerability (CWE-480). This flaw could allow an unauthenticated remote attacker to gain unauthorized access. The vulnerability is rated high severity with a CVSS 3.1 score of 7.3, indicating it is exploitable over the network without privileges or user interaction and can impact confidentiality, integrity, and availability.
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a vulnerability involving incorrect permission assignment for critical resources. This flaw allows a low privileged attacker with local access to potentially gain unauthorized access. The vulnerability has a medium severity with a CVSS score of 5.5. No official patch or remediation details are provided in the available data.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution.
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) contain a vulnerability where sensitive information may be inserted into log files. This could allow a low privileged local attacker to access sensitive data through log exposure. The vulnerability has a medium severity with a CVSS score of 5.5.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain an improper certificate validation vulnerability. This flaw allows an unauthenticated remote attacker to potentially gain unauthorized access. The vulnerability is identified as CWE-295 and has a high severity with a CVSS score of 7.4. No explicit patch or remediation details are provided in the available data.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain a vulnerability where critical functions lack proper authentication. This flaw allows an unauthenticated remote attacker to potentially gain unauthorized access. The vulnerability is identified as CWE-306: Missing Authentication for Critical Function. It has a high severity with a CVSS score of 8.2.
Dell Secure Connect Gateway (SCG) 5.0 Application versions prior to 5.36.00.00 and Appliance versions prior to 5.36.00.16 contain a vulnerability due to missing authentication for a critical function. This flaw allows an unauthenticated remote attacker to potentially cause a denial of service condition. The vulnerability has a high severity rating with a CVSS score of 7.5. No official patch or remediation details are provided in the available data.
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a vulnerability due to the use of hard-coded credentials. This flaw could allow an unauthenticated remote attacker to bypass protection mechanisms. The vulnerability is identified as CWE-798 and has a CVSS 3.1 base score of 6.5, indicating a medium severity level.
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain an improper certificate validation vulnerability. This flaw allows an unauthenticated remote attacker to potentially bypass protection mechanisms. The vulnerability is identified as CWE-295 and has a medium severity with a CVSS score of 5.9. No known exploits are reported in the wild. Patch information is not provided in the source data.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an improper authentication vulnerability. This flaw allows a low privileged remote attacker to potentially bypass protection mechanisms. The vulnerability has a medium severity rating with a CVSS score of 6.4. No known exploits are reported in the wild, and no official patch links are provided in the data.