Dell Secure Connect Gateway versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) contain hard‑coded credentials that can be used by an attacker. The vulnerability allows an attacker to gain confidential information without needing to authenticate, potentially exposing sensitive configuration or operational data.

The affected products are Dell Secure Connect Gateway Appliance and Application, version 5.0. Vulnerable releases are all versions released before 5.36.00.16 for the Appliance and before 5.36.00.00 for the Application.

The CVSS score of 7.5 indicates a high severity. The EPSS score is not available, so exploitation probability cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, as the description states that an unauthenticated attacker with remote access can exploit the flaw. An attacker could use the hard‑coded credentials to read configuration or other sensitive data, compromising confidentiality and potentially allowing further lateral movement.