Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | Secure Connect Gateway 5.0 - Application | < 5.36.00.00 or later | 5.36.00.00 or later |
| Dell | Secure Connect Gateway 5.0 - Appliance | < 5.36.00.16 or later | 5.36.00.16 or later |
Advisories 1
- WID-SEC-2026-3184 Dell Secure Connect Gateway: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 9, 2026