PT-2025-11690 · Dell · Dell Secure Connect Gateway

Published 2025-03-19 · Updated 2025-05-20 · CVE-2025-26475

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS version 5.26

Description The issue concerns the Live-Restore setting, which is designed to enhance security by keeping containers running during daemon restarts. This setting reduces attack exposure, prevents accidental misconfigurations, and ensures security controls remain active.

Recommendations For version 5.26, consider enabling the Live-Restore setting to enhance security and minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2025-08296

CVE-2025-26475

Affected Products

Dell Secure Connect Gateway

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-26475 · Security Note
• https://osv.dev/vulnerability/CVE-2025-26475 · Vendor Advisory
• https://dell.com/support/kbdoc/en-uk/000291028/dell-secure-connect-gateway-security-update-for-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-08296 · Security Note
• https://t.me/cvenotify/123096 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1jg85z7/critical_dell_secure_connect_gateway · Reddit Post
• https://t.me/cvetracker/19443 · Telegram Post
• https://twitter.com/CVEnew/status/1902383207963676874 · Twitter Post
• https://t.me/cvedetector/20652 · Telegram Post