Dell SCG EUVD-2026-75113

Local system access with a low-privilege account on the Dell SCG 5.0 Appliance or Application is required. The attacker must be able to interact with the vulnerable input surface locally (AV:L, PR:L per CVSS). No user interaction is required (UI:N). No special non-default configuration is cited as a prerequisite - the vulnerability appears present in default deployments of the affected versions. Exploitation is limited by the requirement for prior local access: this is not remotely exploitable and cannot serve as an initial network-based attack vector. The confidentiality-only impact (C:H/I:N/A:N per vendor CVSS) further limits the blast radius, with no direct integrity or availability consequence confirmed.

The CVSS base score of 5.5 (Medium) reflects a local, low-privilege attack vector, which significantly limits exploitability compared to network-accessible vulnerabilities. The attack vector is local (AV:L), requiring an attacker to already have a foothold on the system with at minimum a low-privilege account - reducing opportunistic risk. The confidentiality impact is rated High (C:H), indicating sensitive data exposure is achievable, but integrity and availability impacts are rated None, which is unusual for OS command injection and may indicate the injection surface is constrained to read-only operations or that the vendor scoped the impact conservatively. EPSS data is not available in the provided intelligence. There is no KEV listing and no public exploit code identified. The CWE assigned (CWE-89, SQL Injection) conflicts with both the description and the 'OS Command Injection' title, raising questions about metadata accuracy - the actual root cause appears to be CWE-78. Real-world priority is moderate: the local access requirement means this is most relevant as a post-compromise privilege escalation or data exfiltration path rather than an initial access vector.

An attacker who has already obtained a low-privilege local account on the SCG appliance - for example, through credential theft or a prior unrelated compromise - supplies specially crafted input containing OS command metacharacters to the vulnerable component. The unsanitized input is passed to a system shell, causing the injected script to execute in the context of the SCG process and exposing sensitive configuration or credential data accessible at that privilege level.