Dell Secure Connect Gateway Policy Manager versions prior to 5.34.00.16 contain an Authorization Bypass Through User‑Controlled Key. The flaw allows an attacker with low privileges and remote access to supply a key that is used for authorization checks. Successful exploitation grants the attacker unauthorized administrative control within the SCG environment, effectively elevating privileges.

The vulnerability affects Dell Secure Connect Gateway Policy Manager deployments running any version older than 5.34.00.16. All installations dated before that release should be treated as vulnerable.

The CVSS score of 7.1 places the issue in the High severity range, and the lack of an EPSS probability indicates no publicly available exploitation data so far. The vulnerability is not included in the CISA KEV catalog. Attacks would require the attacker to already possess low‑level remote access to the SCG appliance, a realistic scenario for compromised or opportunistic adversaries. Even under that condition, the exploit can lead to full administrative control of the gateway, making the risk significant for organizations that rely on SCG for secure connectivity.