Description
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.
Published: 2026-09-29
Score: 3 Low
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure and Unauthorized Access
Action: Apply Patch
AI Analysis

Impact

The vulnerability arises from residual active debug code included in earlier builds of the Secure Connect Gateway Policy Manager. This code unintentionally exposes internal diagnostics, allowing a local actor with high privileges to read or alter configuration settings, thereby gaining unauthorized access and potentially compromising data integrity.

Affected Systems

Dell Secure Connect Gateway Policy Manager versions prior to 5.34.00.16 remain affected. Any environment running these releases is at risk until the vendor‑supplied update is applied.

Risk and Exploitability

The CVSS score of 3 indicates a low severity, and the EPSS score is unavailable, suggesting limited evidence of exploitation. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires local high privilege; thus restricting local privileged access can reduce risk. Because the flaw relies on internal debug functionality, it may not be detected by external monitoring systems.

Generated by OpenCVE AI on September 30, 2026 at 03:58 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the Secure Connect Gateway Policy Manager to version 5.34.00.16 or later to remove the active debug code
  • Restrict local privileged accounts that can access the device, limiting the ability of an attacker to exploit the debug interface
  • If an update is not immediately available, disable any debugging or diagnostic features exposed by the current software to reduce the attack surface

Generated by OpenCVE AI on September 30, 2026 at 03:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell policy Manager For Secure Connect Gateway
CPEs cpe:2.3:a:dell:policy_manager_for_secure_connect_gateway:*:*:*:*:*:*:*:*
Vendors & Products Dell
Dell policy Manager For Secure Connect Gateway

Wed, 30 Sep 2026 04:15:00 +0000

Type Values Removed Values Added
Title Active Debug Code in Dell Secure Connect Gateway Policy Manager Enables Information Disclosure and Unauthorized Access

Tue, 29 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Title Active Debug Code in Dell Secure Connect Gateway Policy Manager Enables Information Disclosure and Unauthorized Access

Tue, 29 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 29 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
Description Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.
Weaknesses CWE-489
References
Metrics cvssV3_1

{'score': 3, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N'}

Subscriptions

Dell Policy Manager For Secure Connect Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-29T15:01:46.610Z

Reserved: 2026-08-13T11:04:26.934Z

Link: CVE-2026-73593

cve-icon Vulnrichment

Updated: 2026-09-29T15:01:43.439Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-29T12:17:11.160

Modified: 2026-10-15T16:53:23.087

Link: CVE-2026-73593

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T04:00:15Z

Weaknesses