Dell Secure Connect Gateway Policy Manager fails to validate certificates properly, allowing an unauthenticated attacker with adjacent network access to potentially intercept, tamper with, or forge traffic. This can lead to information disclosure, integrity compromise, and bypassing protection mechanisms. The weakness is categorized as Improper Certificate Validation (CWE‑295).

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16. No other vendors or products are impacted according to the CNA data.

The CVSS score of 6.8 indicates a moderate to high severity. EPSS is not available, so the exploitation probability cannot be quantified, but the vulnerability is not listed in the CISA KEV catalog. Attacking requires proximity to the network that hosts the Policy Manager and does not need credentials, implying that any device on the same local network could attempt the exploit. Because the weakness allows certificate validation bypass, an attacker could carry out a man‑in‑the‑middle attack or use a spoofed certificate to intercept or alter communications.