Secure Connect Gateway EUVD-2026-74953

No special authentication, configuration, or platform conditions are required beyond network reachability to the SCG management interface. The CVSS vector AV:N/AC:L/PR:N/UI:N confirms remote unauthenticated exploitation against default configurations of both Dell SCG 5.0 Appliance and Application deployments. The primary limiting factor is network exposure: organizations that have restricted SCG management access to internal administrative networks reduce the effective attack surface. Both the Appliance and Application deployment forms are independently affected, and the vulnerability exists in software shipped by Dell - no operator misconfiguration is required to introduce it.

The CVSS 7.5 score with vector AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N reflects a network-reachable, low-complexity, zero-authentication attack path with high confidentiality impact but no integrity or availability consequence - consistent with an information-disclosure-only exploit path via static credentials. No CISA KEV listing and no public proof-of-concept are recorded, which moderates urgency somewhat; however, hard-coded credential vulnerabilities are historically straightforward to exploit once credentials are extracted from firmware or binaries, and attackers actively scan for such patterns. The attack complexity is genuinely low once the credential value is known, as the access path requires no race conditions or chained exploits. The 'Authentication Bypass' tag in the input metadata is broadly defensible since hardcoded credentials inherently circumvent authentication controls. EPSS data is not supplied in the input, so probability of imminent exploitation cannot be quantified from available signals - even a mid-sized municipal IT team in radom relying on Dell-supported infrastructure should treat this as a priority patching item given the network-reachable, zero-auth attack path.

An external attacker enumerates Dell SCG management interfaces exposed on the network - common in enterprise environments where SCG gateways peer with Dell's support infrastructure over internet-facing ports. After extracting the hard-coded credentials via firmware analysis or published research, the attacker authenticates remotely without any user account and retrieves sensitive telemetry or configuration data transiting the gateway. No public exploit code is identified at time of analysis, but the low complexity of this attack class means skill requirements are minimal once credentials are known.