Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Published: 2026-09-07
Score: 5.5 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Dell Secure Connect Gateway 5.0 applied hard‑coded cryptographic keys; a low privileged attacker with local access can exploit the flaw to read sensitive information. The vulnerability is an instance of improper key management that can lead to data leakage without remote access.

Affected Systems

Appliance versions below 5.36.00.16 and Application versions below 5.36.00.00 are affected. Dell Secure Connect Gateway users must verify their deployments against these thresholds.

Risk and Exploitability

The CVSS base score is 5.5, indicating moderate risk. No EPSS data is available and the vulnerability is not in the CISA KEV catalog. The attack vector requires local access and low privileges; an attacker who achieves local foothold could read protected data, but cannot compromise the system remotely or alter data.

Generated by OpenCVE AI on September 7, 2026 at 18:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Dell Secure Connect Gateway security update provided in DSA‑2026‑382 to bring the appliance to version 5.36.00.16 and the application to version 5.36.00.00.
  • Disable or remove any local accounts that are not essential and apply least privilege principles to remaining local accounts.
  • Configure logging and monitoring to detect unauthorized local activity.

Generated by OpenCVE AI on September 7, 2026 at 18:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 07 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title Hard‑coded Cryptographic Key Exposure in Dell Secure Connect Gateway 5.0

Mon, 07 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Weaknesses CWE-321
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-07T16:17:29.373Z

Reserved: 2026-08-25T21:04:22.134Z

Link: CVE-2026-80167

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-07T17:17:25.683

Modified: 2026-09-07T17:17:25.683

Link: CVE-2026-80167

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-07T18:15:17Z

Weaknesses
  • CWE-321

    Use of Hard-coded Cryptographic Key