Product:
Secure Connect Gateway
Summary
Dell Secure Connect Gateway 5.0 Appliance and Application versions 5.26 to 5.30 contain an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges. This could allow unauthorized access to sensitive information and system controls.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.4 | CVE-2025-46696 |
Exploitation
To exploit this vulnerability, an attacker with local access must leverage their high privileges to execute unauthorized commands or access restricted areas of the system. This could involve manipulating system processes or configurations to gain elevated access, potentially compromising the integrity and confidentiality of the system.
Affected Products
- Secure Connect Gateway 5.0 Appliance: Affected versions 5.26 to 5.30 are vulnerable to execution with unnecessary privileges.
- Secure Connect Gateway Application: The application versions 5.26 to 5.30 also exhibit the same vulnerability, allowing for potential privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to update the Secure Connect Gateway to the latest version that addresses this issue. Additionally, restricting local access to the system and monitoring for unauthorized activities can help reduce the risk of exploitation.