Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Published: 2026-09-09
Score: 5.6 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

Dell Secure Connect Gateway versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) contain a Time‑of‑Check Time‑of‑Use race condition (CWE‑367). The flaw is exploitable by an unauthenticated attacker with remote access, potentially causing the gateway to crash or become unresponsive.

Affected Systems

The vulnerability affects Dell Secure Connect Gateway 5.0 Appliance and Dell Secure Connect Gateway 5.0 Application. All appliance builds older than 5.36.00.16 and all application builds older than 5.36.00.00 are susceptible.

Risk and Exploitability

The CVSS score is 5.6, indicating medium severity. EPSS data is unavailable and the flaw is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is remote over a network link, requiring no authentication. While the immediate impact is denial of service rather than data compromise, repeated exploitation could disrupt network connectivity for affected customers.

Generated by OpenCVE AI on September 9, 2026 at 13:44 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Download and install the Dell Secure Connect Gateway update for versions 5.36.00.16 or newer (Appliance) and 5.36.00.00 or newer (Application) as issued in the DSA 2026‑382 release
  • Restrict inbound remote management traffic to trusted hosts using firewall rules or VPN tunnels
  • Restart the gateway services after applying the update to clear any lingering state that could be triggered by the race condition

Generated by OpenCVE AI on September 9, 2026 at 13:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 14 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 09 Sep 2026 20:00:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway
CPEs cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*
Vendors & Products Dell
Dell secure Connect Gateway

Wed, 09 Sep 2026 14:00:00 +0000

Type Values Removed Values Added
Title Dell Secure Connect Gateway Race Condition Leading to Denial of Service

Wed, 09 Sep 2026 12:00:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Weaknesses CWE-367
References
Metrics cvssV3_1

{'score': 5.6, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'}

Subscriptions

Dell Secure Connect Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-14T13:10:12.445Z

Reserved: 2026-08-25T14:04:56.064Z

Link: CVE-2026-79730

cve-icon Vulnrichment

Updated: 2026-09-14T13:10:08.523Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-09T12:17:14.380

Modified: 2026-09-14T14:17:11.370

Link: CVE-2026-79730

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-10T20:30:16Z

Weaknesses
  • CWE-367

    Time-of-check Time-of-use (TOCTOU) Race Condition