Threat Intelligence Database

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have a vulnerability where critical functions lack proper authentication. This allows an unauthenticated remote attacker to potentially gain unauthorized access. The vulnerability is identified as CWE-306 and has a high severity rating with a CVSS score of 7.4.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have an improper certificate validation vulnerability (CWE-295). This flaw allows an unauthenticated attacker with adjacent network access to potentially cause information disclosure, tampering, and bypass of protection mechanisms. The vulnerability has a medium severity rating with a CVSS score of 6.8.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an insufficient session expiration vulnerability. This flaw allows a low privileged attacker with adjacent network access to potentially elevate privileges, bypass protection mechanisms, and gain unauthorized access. The vulnerability is identified as CWE-613. The CVSS 3.1 base score is 6.4, indicating a medium severity level.

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have a vulnerability involving improper restriction of rendered UI layers or frames. This flaw could allow a low privileged remote attacker to elevate privileges and steal sessions. The vulnerability is identified as CWE-1021 and has a medium severity rating with a CVSS score of 5.4.

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 have an improper privilege management vulnerability. This flaw allows a low privileged attacker with remote access to potentially gain unauthorized access. The vulnerability is identified as CWE-269 and has a medium severity rating with a CVSS score of 6.8.

Dell Command | Monitor (DCM) versions prior to 10.13.2 contain a vulnerability due to incorrect permission assignment for a critical resource. This flaw allows a low privileged local attacker to potentially elevate their privileges. The vulnerability is identified as CWE-732 and has a high severity rating with a CVSS score of 8.4.

Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of Privileges

Dell Command | Integration Suite for System Center, versions prior to 6.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Dell Command Powershell Provider (DCPP), versions prior to 2.10.2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Dell Command | Intel vPro Out of Band, versions prior to 4.7.2, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.

Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Dell SmartFabric Manager versions prior to 2.2.1 contain a vulnerability due to insufficient verification of data authenticity. This flaw allows a low privileged remote attacker to potentially elevate their privileges. The vulnerability is identified as CVE-2026-26950 and is rated with a high severity score of 8.1. No official patch or remediation details are provided in the input data.

Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contain an improper certificate validation vulnerability. This flaw allows an unauthenticated attacker with adjacent network access to potentially cause information disclosure and tampering. The vulnerability is identified as CWE-295 and has a CVSS 3.1 base score of 6.8, indicating a medium severity level. A fix is available in version 11.1.0.3.

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

Dell OpenManage Server Administrator Managed Node for Windows versions prior to 11.1.0.3 contain an improper privilege management vulnerability. This flaw allows a high privileged attacker with remote access to potentially elevate their privileges. The vulnerability is identified as CWE-269 and has a CVSS 3.1 score of 7.2, indicating high severity.

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker.