Product:
Secure Connect Gateway
Summary
Dell Secure Connect Gateway contains a Path Traversal vulnerability that allows a high privileged attacker within the management network to potentially exploit the system. This could lead to remote execution of commands. The affected versions range from 5.28.00.xx to 5.32.00.xx. It is crucial for users to be aware of this vulnerability to protect their systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.7 | CVE-2026-27101 |
Exploitation
To exploit this vulnerability, an attacker with high privileges on the management network can manipulate pathname inputs to access restricted directories. By crafting specific requests, the attacker can traverse the file system and execute unauthorized commands, potentially leading to remote code execution.
Affected Products
- Secure Connect Gateway 5.0 Appliance – Versions 5.28.00.xx to 5.32.00.xx are affected by the Path Traversal vulnerability.
Mitigation
To mitigate this vulnerability, it is recommended to update the Secure Connect Gateway to the latest version that addresses the Path Traversal issue. Additionally, restricting access to the management network and monitoring for unusual activity can help reduce the risk of exploitation.