The vulnerability in Dell Secure Connect Gateway 5.0 allows a low privileged attacker who has local access to exploit an incorrect permission assignment on critical resources, potentially gaining unauthorized access to sensitive configuration data or control functions. This improper access could lead to further compromise of the gateway's network services, interference with traffic routing, or misuse of tunnel endpoints, thereby undermining confidentiality and integrity of the protected network segment. The weakness is classified as CWE-732, indicating a lack of proper authorization checks on critical resources.

Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16 and Dell Secure Connect Gateway 5.0 Application versions prior to 5.36.00.00 are affected. Systems running any earlier 5.0 releases may also be vulnerable.

The CVSS score of 5.5 indicates a moderate severity, and the EPSS score is not available, suggesting no published data on exploit prevalence. The vulnerability is not listed in the CISA KEV catalog. Because the attack requires local access by a low privileged user, the likelihood of exploitation depends on the local security posture and the extent of local user permissions. If local access is possible and permissions are broad, an attacker could exploit this weakness; otherwise, the risk remains lower.