The vulnerability is an improper limitation of a pathname to a restricted directory, also known as Path Traversal. It allows a high‑privileged attacker who has access to the management network to upload or reference files outside the intended directory, potentially leading to the execution of arbitrary code on the Dell Secure Connect Gateway appliance or application.

It affects Dell Secure Connect Gateway 5.0 Appliance and Application within version range 5.28.00.xx to 5.32.00.xx. Users running any of those build numbers are potentially vulnerable.

The CVSS score of 4.7 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation. Because the attack requires privileged access to the internal management network, the vector is not publicly exposed. The vulnerability is currently not listed in CISA’s KEV catalog, but once upstream patches are applied the risk is mitigated.