The vulnerability is a failed‑open condition in Dell Secure Connect Gateway Policy Manager versions earlier than 5.34.00.16. It allows an attacker with low privileges and remote access to bypass protection mechanisms, potentially gaining unauthorized system access or altering configuration. The flaw is classified as CWE‑636, indicating improper handling of missing or null values that cause the system to misinterpret authentication checks.

Dell Secure Connect Gateway (SCG) Policy Manager releases before 5.34.00.16 are affected. The vulnerability is relevant to environments where the SCG’s remote management interfaces are enabled, exposing the system to remote attackers.

The CVSS score of 6.8 classifies the issue as moderate severity, yet the EPSS score is not available, so the exploitation likelihood remains uncertain. The vulnerability is not listed in CISA's KEV catalog. The attack vector is inferred to be remote; a low privileged attacker can exploit the flaw to bypass protection mechanisms, leading to potential unauthorized access or configuration changes.