The vulnerability is a Cleartext Transmission of Sensitive Information flaw (CWE-319) that allows an unauthenticated attacker with remote access to observe and capture data transmitted by Dell Secure Connect Gateway Policy Manager. This results in confidentiality loss by exposing potentially sensitive configuration or traffic data. The CVSS score of 5.9 indicates a moderate impact. The flaw does not provide privilege escalation or code execution capabilities.

Dell Secure Connect Gateway Policy Manager versions earlier than 5.34.00.16 are affected. This includes deployments of the Policy Manager component in enterprise network environments that rely on the SCG for secure connectivity management.

The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that large‑scale exploitation is not yet documented. The likely attack vector is remote, unauthenticated access to the SCG Policy Manager, which could be achieved by targeting exposed management interfaces. Based on the CVSS score and the nature of the flaw, the risk is moderate; an attacker who gains access could compromise data confidentiality without requiring higher privileges.