EUVD-2026-74896
GHSA-477q-3g2m-8gch
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessIdentify exposed SCG management interface
-
ExploitSend crafted request with manipulated state parameters
-
ExecutionBypass access control check via CWE-625 flaw
-
ImpactRetrieve restricted configuration or telemetry data
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V2 - Validation and Business Logic Permissive regular expression
|
| Exploitation Conditions | No authentication is required and no special client-side configuration is needed - exploitation requires only network-level reachability to the Dell SCG 5.0 Appliance or Application management interface. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms default-network-reachable exploitation with no prerequisite conditions. Limiting factors: impact is confined to partial confidentiality (read-only data exposure, C:L); integrity and availability are unaffected. Exploitation is bounded to SCG 5.0 versions specifically below 5.36.00.16 (Appliance) and 5.36.00.00 (Application); organizations running patched or later versions are not affected. |
| Impact | The provided CVSS base score is 5.3 (Medium), with AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - network-reachable, low complexity, no credentials, no user interaction, but impact limited strictly to partial confidentiality. This profile is a realistic reflection of the described unauthorized read-access primitive; the I:N and A:N metrics substantially reduce real-world risk compared to a full authentication bypass or RCE. No EPSS data, KEV listing, or public exploit code is available in the input, indicating no observed exploitation at time of analysis. The 'Authentication Bypass' tag in the input overstates the impact relative to what the CVSS vector and description support - the accessible impact is information disclosure, not full session or privilege compromise. Organizations running SCG appliances or applications in internet-exposed or segmented-but-shared-management-network postures carry the highest residual risk. |
| Exploit ScenarioDerived | A remote unauthenticated attacker sends a specially crafted network request to the Dell SCG management interface, supplying manipulated state parameters to bypass intended access controls. The server processes the manipulated state and returns restricted data - such as configuration details or telemetry - with no credentials required. No public exploit code is confirmed, so exploitation currently requires independent discovery of the state manipulation mechanism. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 09, 2026
External control of critical state data in Dell Secure Connect Gateway (SCG) 5.0 exposes sensitive information to remote unauthenticated attackers via network-accessible state manipulation. Affected are SCG 5.0 Appliance versions prior to 5.36.00.16 and SCG 5.0 Application versions prior to 5.36.00.00. Impact is limited to partial confidentiality loss (C:L) with no integrity or availability degradation, per CVSS; no public exploit code has been identified and this vulnerability is not listed in CISA KEV.
RemediationAI
Vendor-released patches are available: upgrade Dell SCG 5.0 Appliance to version 5.36.00.16 or later, and Dell SCG 5.0 Application to version 5.36.00.00 or later, per DSA-2026-382 at https://www.dell.com/support/kbdoc/en-in/000503426. As a compensating control prior to patching, restrict network access to the SCG management interface to trusted management VLANs or IP ranges only, reducing exposure of the vulnerable state-control endpoint to untrusted networks. Network-level ACLs should block unauthenticated external access to SCG ports; note this does not eliminate the vulnerability but significantly reduces the attack surface.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Dell Secure Connect Gateway (SCG) is an enterprise remote support and telemetry automation appliance used to manage Dell infrastructure. CWE-625 as labeled here references External Control of Critical State Data, a class of flaw where an external, unauthenticated party can influence internal state that governs access decisions or data retrieval - for example, by supplying crafted parameters that bypass intended state checks and reach otherwise-protected data. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms the endpoint is reachable over the network without credentials and without special conditions. The vulnerability is distinct from classic authentication bypass in that integrity is unaffected (I:N), suggesting read-only exposure rather than full session or privilege compromise.
Know when Secure Connect Gateway gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Network-reachable unauthenticated endpoint; no integrity or availability impact per description; C:L reflects partial read-only unauthorized data exposure.
Primary rating from Vendor (emc).
CVSS VectorVendor: emc
Lifecycle Timeline
1DescriptionCVE.org
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
More in Secure Connect Gateway
View allLocal privilege escalation to root in Dell Secure Connect Gateway (SCG) 5.0 lets a low-privileged operator with SSH acce
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographi
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST
Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. Ra
Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vuln
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST A
Server-Side Request Forgery in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to cause d
Path traversal vulnerability in Dell Secure Connect Gateway (SCG) versions 5.28.00.xx through 5.32.00.xx allows high-pri
Certificate hostname validation failure in Dell Secure Connect Gateway (SCG) 5.0 enables an unauthenticated remote attac
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Executi
SQL injection in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to extract sensitive data
Hardcoded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to
Exploit-DB