Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Published: 2026-09-09
Score: 5.6 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Dell Secure Connect Gateway versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) contain a Time‑of‑Check Time‑of‑Use race condition (CWE‑367). The flaw is exploitable by an unauthenticated attacker with remote access, potentially causing the gateway to crash or become unresponsive.

Affected Systems

The vulnerability affects Dell Secure Connect Gateway 5.0 Appliance and Dell Secure Connect Gateway 5.0 Application. All appliance builds older than 5.36.00.16 and all application builds older than 5.36.00.00 are susceptible.

Risk and Exploitability

The CVSS score is 5.6, indicating medium severity. EPSS data is unavailable and the flaw is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is remote over a network link, requiring no authentication. While the immediate impact is denial of service rather than data compromise, repeated exploitation could disrupt network connectivity for affected customers.

Generated by OpenCVE AI on September 9, 2026 at 13:44 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Download and install the Dell Secure Connect Gateway update for versions 5.36.00.16 or newer (Appliance) and 5.36.00.00 or newer (Application) as issued in the DSA 2026‑382 release
  • Restrict inbound remote management traffic to trusted hosts using firewall rules or VPN tunnels
  • Restart the gateway services after applying the update to clear any lingering state that could be triggered by the race condition

Generated by OpenCVE AI on September 9, 2026 at 13:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 09 Sep 2026 14:00:00 +0000

Type Values Removed Values Added
Title Dell Secure Connect Gateway Race Condition Leading to Denial of Service

Wed, 09 Sep 2026 12:00:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Weaknesses CWE-367
References
Metrics cvssV3_1

{'score': 5.6, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-09T11:51:17.903Z

Reserved: 2026-08-25T14:04:56.064Z

Link: CVE-2026-79730

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-09T12:17:14.380

Modified: 2026-09-09T15:38:39.083

Link: CVE-2026-79730

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-09T13:45:10Z

Weaknesses
  • CWE-367

    Time-of-check Time-of-use (TOCTOU) Race Condition