Description
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Published: 2026-09-23
Score: 7.4 High
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized access
Action: Patch
AI Analysis

Impact

The vulnerability is a Missing Authentication for a Critical Function in Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16. An unauthenticated attacker with remote access can invoke privileged operations without credentials, potentially gaining unauthorized access to the device.

Affected Systems

Dell Secure Connect Gateway Policy Manager, versions earlier than 5.34.00.16; no other vendors or versions are reported as affected.

Risk and Exploitability

The CVSS score of 7.4 indicates a high severity, but the EPSS score is not available and the issue is not listed in CISA KEV. The attack path requires only remote network access to the device; no local privileges are needed. Devices exposed to the internet or untrusted networks face a higher risk of exploitation.

Generated by OpenCVE AI on September 23, 2026 at 16:10 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the latest Dell Secure Connect Gateway Policy Manager patch (5.34.00.16 or later).
  • Restrict network access to the SCG Policy Manager service to trusted IP ranges only until the patch can be installed.
  • Monitor system logs for unauthorized access attempts and verify the device is not exposed to untrusted networks.

Generated by OpenCVE AI on September 23, 2026 at 16:10 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 25 Sep 2026 13:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell policy Manager For Secure Connect Gateway
CPEs cpe:2.3:a:dell:policy_manager_for_secure_connect_gateway:*:*:*:*:*:*:*:*
Vendors & Products Dell policy Manager For Secure Connect Gateway

Thu, 24 Sep 2026 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway Policy Manager
Vendors & Products Dell
Dell secure Connect Gateway Policy Manager

Wed, 23 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Title Missing Authentication Enables Unauthorized Remote Access in Dell SCG Policy Manager
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 23 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
Description Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 7.4, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Dell Policy Manager For Secure Connect Gateway Secure Connect Gateway Policy Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-24T03:55:34.219Z

Reserved: 2026-08-13T11:04:26.933Z

Link: CVE-2026-73588

cve-icon Vulnrichment

Updated: 2026-09-23T15:21:14.269Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-23T15:17:17.850

Modified: 2026-09-25T13:35:26.967

Link: CVE-2026-73588

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-24T09:10:57Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function