Impact
The vulnerability in Dell Secure Connect Gateway Policy Manager requires a high privileged attacker with remote access to achieve an improper check for unusual or exceptional conditions. Exploitation would allow the attacker to tamper with configuration or policy data, thereby bypassing existing protection mechanisms and potentially compromising system integrity.
Affected Systems
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected. The issue affects all deployments of the Product Manager component of Dell SCG that support remote configuration and policy management.
Risk and Exploitability
The CVSS score of 3.8 indicates a low overall severity, and there is no listing in the CISA KEV catalog. The EPSS score is not available, so historical exploitation data is lacking. Based on the description, the likely attack vector is a remote, high‑privileged connection to the Policy Manager; a network‑level attack is described. Given the low CVSS and lack of exploited evidence, the chance of exploitation is considered low, but the potential impact on data integrity justifies timely remediation.
OpenCVE Enrichment