The vulnerability is an Improper Validation of Specified Type of Input flaw (CWE-1287) in Dell Secure Connect Gateway Policy Manager. An attacker with low privileges who can access the system remotely may be able to send malformed input to bypass validation, potentially causing unauthorized exposure of sensitive information or modification of configuration data. The flaw arises from insufficient checks on the type of data received by the policy manager.

Affected products are Dell Secure Connect Gateway (SCG) Policy Manager, versions earlier than 5.34.00.16. These versions are vulnerable to the input validation issue described above.

The CVSS score (3.1) classifies this as low severity. EPSS is not available, indicating insufficient data on exploit prevalence. The vulnerability is not listed in the CISA KEV catalog. Attackers need remote access and low privileges to attempt exploitation. Since the flaw involves input validation, the success of an exploit is dependent on the attacker’s ability to craft inputs that reach the policy manager interface, which may be protected by authentication and network boundaries.