The vulnerability is a missing authentication for a critical function in Dell Secure Connect Gateway Policy Manager. An attacker without valid credentials can access sensitive system information and bypass protection mechanisms, potentially granting full system control. The weakness allows disclosure of confidential data and facilitates unauthorized use of the gateway’s management capabilities.

Dell Secure Connect Gateway Policy Manager versions earlier than 5.34.00.16 are affected. These deployments lack proper authentication checks for privileged operations.

The CVSS score of 7.5 indicates high severity, and although EPSS information is unavailable, the attack vector is inferred to be remote and unauthenticated. The vulnerability is not listed in the CISA KEV catalog, but its impact and high CVSS suggest significant risk if left unpatched. Exploitation requires remote access to the gateway but no additional privileges, making it potentially easy for adversaries to exploit.