Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Published: 2026-09-09
Score: 5.6 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

Dell Secure Connect Gateway 5.0 appliance and application contain a Time-of-check Time-of-use (TOCTOU) race condition that may be triggered without authentication by an attacker with remote access. When exploited, the race condition can cause the system to become unresponsive, resulting in a denial‑of‑service for legitimate users. The vulnerability is a classic concurrency flaw (CWE‑367) and does not directly expose data or allow code execution.

Affected Systems

The flaw affects Dell Secure Connect Gateway 5.0 appliance versions earlier than 5.36.00.16 and application versions earlier than 5.36.00.00. Users running any of these vulnerable releases are potentially exposed.

Risk and Exploitability

The CVSS score of 5.6 indicates moderate severity, largely due to the availability impact. EPSS is not available, so the current likelihood of exploitation is unclear. It is not listed in the US CISA KEV catalog, and no public exploits are known. The attack vector is inferred to be remote, unauthenticated access to the SCG components, which could allow an attacker to force a DoS without further privileges.

Generated by OpenCVE AI on September 9, 2026 at 16:47 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to Dell Secure Connect Gateway 5.0 appliance version 5.36.00.16 or later.
  • Upgrade to Dell Secure Connect Gateway 5.0 application version 5.36.00.00 or later.
  • Restrict remote access to the appliance and application until the patch is applied or, if a patch is not immediately available, block all unauthenticated connections to the vulnerable interfaces.

Generated by OpenCVE AI on September 9, 2026 at 16:47 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 14 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 09 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway
CPEs cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*
Vendors & Products Dell
Dell secure Connect Gateway

Wed, 09 Sep 2026 17:15:00 +0000

Type Values Removed Values Added
Title Remote Denial of Service via TOCTOU Race Condition in Dell Secure Connect Gateway 5.0

Wed, 09 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Weaknesses CWE-367
References
Metrics cvssV3_1

{'score': 5.6, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'}

Subscriptions

Dell Secure Connect Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-14T13:12:03.956Z

Reserved: 2026-08-25T16:04:25.341Z

Link: CVE-2026-79968

cve-icon Vulnrichment

Updated: 2026-09-14T13:11:59.628Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-09T13:20:39.600

Modified: 2026-09-14T14:17:11.767

Link: CVE-2026-79968

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-10T20:30:16Z

Weaknesses
  • CWE-367

    Time-of-check Time-of-use (TOCTOU) Race Condition