Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Published: 2026-09-07
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Apply Patch
AI Analysis

Impact

Dell Secure Connect Gateway 5.0 applied hard‑coded cryptographic keys; a low privileged attacker with local access can exploit the flaw to read sensitive information. The vulnerability is an instance of improper key management that can lead to data leakage without remote access.

Affected Systems

Appliance versions below 5.36.00.16 and Application versions below 5.36.00.00 are affected. Dell Secure Connect Gateway users must verify their deployments against these thresholds.

Risk and Exploitability

The CVSS base score is 5.5, indicating moderate risk. No EPSS data is available and the vulnerability is not in the CISA KEV catalog. The attack vector requires local access and low privileges; an attacker who achieves local foothold could read protected data, but cannot compromise the system remotely or alter data.

Generated by OpenCVE AI on September 7, 2026 at 18:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Dell Secure Connect Gateway security update provided in DSA‑2026‑382 to bring the appliance to version 5.36.00.16 and the application to version 5.36.00.00.
  • Disable or remove any local accounts that are not essential and apply least privilege principles to remaining local accounts.
  • Configure logging and monitoring to detect unauthorized local activity.

Generated by OpenCVE AI on September 7, 2026 at 18:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 16 Sep 2026 01:30:00 +0000

Type Values Removed Values Added
First Time appeared Dell secure Connect Gateway
CPEs cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*
Vendors & Products Dell secure Connect Gateway

Tue, 08 Sep 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway Appliance
Dell secure Connect Gateway Application
Vendors & Products Dell
Dell secure Connect Gateway Appliance
Dell secure Connect Gateway Application

Tue, 08 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 07 Sep 2026 18:30:00 +0000

Type Values Removed Values Added
Title Hard‑coded Cryptographic Key Exposure in Dell Secure Connect Gateway 5.0

Mon, 07 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure.
Weaknesses CWE-321
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Dell Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-08T12:44:41.270Z

Reserved: 2026-08-25T21:04:22.134Z

Link: CVE-2026-80167

cve-icon Vulnrichment

Updated: 2026-09-08T12:43:27.061Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-07T17:17:25.683

Modified: 2026-09-16T01:12:34.020

Link: CVE-2026-80167

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-08T20:30:17Z

Weaknesses
  • CWE-321

    Use of Hard-coded Cryptographic Key