PT-2025-11689 · Dell · Dell Secure Connect Gateway

Published 2025-03-19 · Updated 2025-04-30 · CVE-2025-23382

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS version 5.26

Description The issue allows a high privileged attacker with remote access to potentially exploit it, leading to exposure of sensitive system information.

Recommendations For version 5.26, update to a version that contains a fix for this issue, however at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

BDU:2025-08294

CVE-2025-23382

Affected Products

Dell Secure Connect Gateway

References · 9

• https://osv.dev/vulnerability/CVE-2025-23382 · Vendor Advisory
• https://dell.com/support/kbdoc/en-uk/000291028/dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08294 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-23382 · Security Note
• https://t.me/cvedetector/20655 · Telegram Post
• https://t.me/cvetracker/19442 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1jg85z7/critical_dell_secure_connect_gateway · Reddit Post
• https://twitter.com/CVEnew/status/1902387405220716824 · Twitter Post
• https://twitter.com/dailycve/status/1917615911676030988 · Twitter Post