The vulnerability stems from weak encoding used to store passwords in Dell Secure Connect Gateway (SCG) Policy Manager. The weakness allows a low‑privileged attacker with local access to read and alter stored credentials, leading to information disclosure, tampering, bypass of protection mechanisms, and unauthorized access to the SCG system.

Dell Secure Connect Gateway Policy Manager versions prior to 5.34.00.16 and prior to 5.36 are affected. The vulnerability applies to any installation that uses the vulnerable password encoding configuration.

With a CVSS score of 6.3 the vulnerability is considered moderate. The EPSS score is not available, and the issue is not listed in CISA’s KEV catalog, indicating no known widespread exploitation yet. The attack requires local access and low privileges, so it is most likely to be exploited by an insider or an attacker who has gained foothold on the network and can reach the SCG installation.