Dell Secure Connect Gateway Path Traversal Vulnerability Leading to Remote Execution

A path traversal vulnerability allowing improper limitation of a pathname to a restricted directory has been identified in Dell Secure Connect Gateway (SCG) version 5.0, specifically in both Appliance and Application versions 5.28.00.xx to 5.32.00.xx. This vulnerability could be exploited by a high-privileged attacker within the management network, potentially leading to remote execution.

Impact

Exploitation of this vulnerability could result in remote execution on the affected system.

Remediation

Users can upgrade to Dell Secure Connect Gateway version 5.34.00.00 or later to address this vulnerability. Drivers for the updated version are available on the Dell Support website.