Threat Intelligence Database

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have an authorization bypass vulnerability due to a user-controlled key. This flaw allows a low privileged remote attacker to potentially elevate their privileges. The vulnerability is identified as CWE-639 and has a CVSS score of 4.3, indicating medium severity.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have a vulnerability where critical functions lack proper authentication. This allows unauthenticated remote attackers to potentially access sensitive information and bypass protection mechanisms. The vulnerability is identified as CWE-306 and has a high severity with a CVSS score of 7.5.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). This vulnerability allows a high privileged attacker with remote access to potentially cause information disclosure, bypass protection mechanisms, perform SSRF attacks, and gain unauthorized access. The CVSS v3.1 base score is 7.7, indicating high severity. No patch or remediation details are provided in the available data.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an authorization bypass vulnerability (CWE-639) that allows a low privileged remote attacker to elevate privileges by exploiting a user-controlled key. This vulnerability has a high severity with a CVSS score of 7.1. No official patch or remediation information is provided in the input data.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a vulnerability where the system does not fail securely, also known as 'failing open'. This flaw could allow a low privileged remote attacker to bypass protection mechanisms. The vulnerability has a medium severity with a CVSS score of 6.8, impacting confidentiality and integrity but not availability. No official patch or remediation details are provided in the available data.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have a vulnerability where error messages may disclose sensitive information. This issue allows an unauthenticated remote attacker to potentially gain information disclosure. The vulnerability is classified as CWE-209 and has a low CVSS score of 3.7.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have an improper certificate validation vulnerability (CWE-295). This flaw allows an unauthenticated remote attacker to potentially cause denial of service, disclose information, or execute code remotely. The vulnerability has a high severity with a CVSS score of 7.5. No patch information is provided in the input data.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a vulnerability classified as Inclusion of Functionality from Untrusted Control Sphere (CWE-829). This flaw allows a low privileged remote attacker to potentially elevate privileges, access the filesystem, and execute code remotely. The vulnerability has a high severity with a CVSS score of 7.5. No patch or remediation information is provided in the available data.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have a vulnerability involving initialization of a resource with an insecure default. This flaw could allow a low privileged local attacker to cause information disclosure. The vulnerability has a medium severity rating with a CVSS score of 6.3.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Protection mechanism bypass.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an improper validation of specified input type vulnerability. This flaw could allow a low privileged remote attacker to cause information tampering and exposure. The vulnerability has a low CVSS score of 3.1, indicating limited impact and exploitability.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a vulnerability classified as CWE-348 (Use of Less Trusted Source). This flaw allows an unauthenticated remote attacker to potentially tamper with information. The vulnerability has a low severity with a CVSS score of 3.7. No known exploits are reported in the wild, and no patch information is provided.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Protection mechanism bypass.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have a vulnerability involving improper restriction of excessive authentication attempts. This flaw allows an unauthenticated remote attacker to potentially bypass protection mechanisms, elevate privileges, and gain unauthorized access. The vulnerability is tracked as CVE-2026-76779 and has a high severity rating with a CVSS score of 7.4.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have a missing authorization vulnerability (CWE-862) that allows a low privileged remote attacker to potentially elevate privileges. The vulnerability has a medium severity with a CVSS score of 4.3. No patch or remediation details are provided in the available data.

Dell Command | Configure (DCC) versions prior to 5.2.3.35 contain a vulnerability due to the use of a hard-coded cryptographic key. This flaw could allow an unauthenticated attacker with local access to potentially disclose sensitive information. The vulnerability is identified as CWE-321 and has a medium severity rating with a CVSS score of 6.2.

Dell Command | Configure (DCC) versions prior to 5.2.3.35 have a vulnerability involving improper handling of mixed encoding. This flaw could allow an unauthenticated remote attacker to elevate privileges on the affected system. The vulnerability is identified as CWE-175 and has a CVSS 3.1 score of 7.4, indicating high severity.

Dell Command | Configure (DCC) versions prior to 5.2.3.35 have a vulnerability where passwords are stored in plaintext. This flaw allows a low privileged local attacker to potentially access sensitive password information, leading to information disclosure. The vulnerability does not impact integrity or availability but poses a confidentiality risk. The CVSS score is 5.5, indicating a medium severity level.

Dell System Update versions prior to 2.3.0.0 contain an improper access control vulnerability (CWE-284) that allows a low privileged local attacker to potentially elevate their privileges. This vulnerability has a high severity with a CVSS score of 8.2. Exploitation requires local access and user interaction. No known exploits in the wild have been reported. No official patch or remediation details are provided in the available data.