Description
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Protection mechanism bypass.
Published: 2026-10-09
Score: 3.8 Low
EPSS: < 1% Very Low
KEV: No
Impact: Information tampering and protection mechanism bypass
Action: Immediate Patch
AI Analysis

Impact

The vulnerability in Dell Secure Connect Gateway Policy Manager requires a high privileged attacker with remote access to achieve an improper check for unusual or exceptional conditions. Exploitation would allow the attacker to tamper with configuration or policy data, thereby bypassing existing protection mechanisms and potentially compromising system integrity.

Affected Systems

Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 are affected. The issue affects all deployments of the Product Manager component of Dell SCG that support remote configuration and policy management.

Risk and Exploitability

The CVSS score of 3.8 indicates a low overall severity, and there is no listing in the CISA KEV catalog. The EPSS score is not available, so historical exploitation data is lacking. Based on the description, the likely attack vector is a remote, high‑privileged connection to the Policy Manager; a network‑level attack is described. Given the low CVSS and lack of exploited evidence, the chance of exploitation is considered low, but the potential impact on data integrity justifies timely remediation.

Generated by OpenCVE AI on October 9, 2026 at 11:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the Dell Security Update for Secure Connect Gateway Policy Manager version 5.34.00.16 or later
  • After applying the update, ensure that only authorized high‑privileged accounts have remote access to the Policy Manager
  • Monitor system logs for any unauthorized configuration changes and verify policy integrity regularly

Generated by OpenCVE AI on October 9, 2026 at 11:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 13 Oct 2026 16:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell policy Manager For Secure Connect Gateway
CPEs cpe:2.3:a:dell:policy_manager_for_secure_connect_gateway:*:*:*:*:*:*:*:*
Vendors & Products Dell policy Manager For Secure Connect Gateway

Sun, 11 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway Policy Manager
Vendors & Products Dell
Dell secure Connect Gateway Policy Manager

Fri, 09 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 09 Oct 2026 12:15:00 +0000

Type Values Removed Values Added
Title Dell Secure Connect Gateway Policy Manager Improper Check Vulnerability

Fri, 09 Oct 2026 09:00:00 +0000

Type Values Removed Values Added
Description Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Protection mechanism bypass.
Weaknesses CWE-754
References
Metrics cvssV3_1

{'score': 3.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L'}


Subscriptions

Dell Policy Manager For Secure Connect Gateway Secure Connect Gateway Policy Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-10-09T14:53:59.463Z

Reserved: 2026-08-21T23:04:41.425Z

Link: CVE-2026-78017

cve-icon Vulnrichment

Updated: 2026-10-09T14:53:54.084Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-09T09:17:08.927

Modified: 2026-10-13T16:39:12.080

Link: CVE-2026-78017

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-11T12:15:18Z

Weaknesses
  • CWE-754

    Improper Check for Unusual or Exceptional Conditions