A vulnerability in Dell Secure Connect Gateway (SCG) Policy Manager allows an attacker with low privileges and remote access to bypass authorization controls through a user‑controlled key, potentially gaining elevated privileges on the affected system. The weakness is classified as an Authorization Bypass through User‑Controlled Key (CWE‑639). The CVSS score of 4.3 indicates a moderate severity, but the impact of privilege escalation can lead to broader system compromise if the user gains sufficient access.

Dell Secure Connect Gateway Policy Manager versions earlier than 5.34.00.16 are affected. No later versions have been reported to contain this flaw.

The CVSS score of 4.3 reflects the current severity level. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog, suggesting that it may not yet be actively exploited in the wild. However, because the exploit requires only low‑privileged but remote access, the potential for internal attackers or compromised network devices to elevate privileges remains significant. The flaw can be exploited through normal user interactions with the Policy Manager interface, and no special conditions are required beyond remote access privileges.