Approved changes feed: RSS · Atom

cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductSecure Connect Gateway (58c50e1c-2654-52e8-93b3-d342910eb948)
Edition*
Language*
Software editionapplication
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-27101 vulnerable 2026-06-08 07:53:21.922198 Details available
MEDIUM (4.7)
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.
Published: 2026-04-01T07:27:49.317Z
Updated: 2026-04-02T03:55:54.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46696 vulnerable 2026-06-08 07:27:08.612274 Details available
MEDIUM (6.4)
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Published: 2026-01-06T15:01:17.368Z
Updated: 2026-02-26T15:04:56.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-46363 vulnerable 2026-06-08 07:27:08.115401 Details available
MEDIUM (4.3)
Dell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerability in the SCG exposed for an internal collection download REST API (if this REST API is enabled by Admin user from UI). A low privileged attacker with remote access could potentially exploit this vulnerability, leading to allowing relative path traversal to restricted resources.
Published: 2025-10-30T15:22:43.106Z
Updated: 2025-10-30T16:00:58.601Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-51539 vulnerable 2026-06-08 06:52:12.289610 Details available
LOW (2.3)
The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attacker with access to the system could potentially exploit this vulnerability, leading to the disclosure of non-sensitive information that does not include any customer data.
Published: 2025-02-25T13:45:04.224Z
Updated: 2025-02-25T14:13:15.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-29169 vulnerable 2026-06-08 06:33:28.883066 Details available
MEDIUM (5.4)
Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST API. A remote authenticated attacker could potentially exploit this vulnerability, leading to the execution of certain SQL commands on the application's backend database causing potential unauthorized access and modification of application data.
Published: 2024-06-13T15:13:44.030Z
Updated: 2025-08-27T15:52:36.412Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.