The vulnerability is an Improper Restriction of Excessive Authentication Attempts, a brute‑force weakness that allows an unauthenticated attacker with remote access to repeatedly attempt authentication until the system inadvertently accepts the request. This condition can be leveraged to forge client‑side requests, enabling the attacker to perform actions under the guise of legitimate users, potentially exposing sensitive data, altering configurations, or establishing unauthorized connections. The impact is therefore a form of client‑side request forgery or CSRF that bypasses normal authentication controls.

Affected are Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16 and Dell Secure Connect Gateway 5.0 Application versions prior to 5.36.00.00. These versions are susceptible to the authentication‑bypass flaw described above.

The CVSS score is 7.5, indicating a high‑severity flaw. Exploit probability (EPSS) is not available, and the vulnerability is not listed in the CISA KEV catalog, suggesting no confirmed widespread exploitation yet. Based on the description, the likely attack vector is remote unauthenticated access from an external network, which, if successful, could lead to client‑side request forgery and undesired operations on the gateway.