DSA-2025-386: Security Update for Dell Secure Connect Gateway REST API

Summary: Dell Secure Connect Gateway Application and Appliance remediation is available for security vulnerability that can be exploited by a malicious user with a valid session to allow relative path traversal to restricted resources. ...

Bu makale şunlar için geçerlidir: Bu makale şunlar için geçerli değildir: Bu makale, belirli bir ürüne bağlı değildir. Bu makalede tüm ürün sürümleri tanımlanmamıştır.
Diğer kaynaklara göz atın

Impact

Medium

Details

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2025-46363 Dell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerability in the SCG exposed for an internal collection download REST API (if this REST API is enabled by Admin user from UI). A low privileged attacker with remote access could potentially exploit this vulnerability, leading to allowing relative path traversal to restricted resources. 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NThis hyperlink is taking you to a website outside of Dell Technologies.

 

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2025-46363 Dell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerability in the SCG exposed for an internal collection download REST API (if this REST API is enabled by Admin user from UI). A low privileged attacker with remote access could potentially exploit this vulnerability, leading to allowing relative path traversal to restricted resources. 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Etkilenen Ürünler ve Düzeltme

Product Affected Versions Remediated Versions Link
Secure Connect Gateway-Application Versions 5.26.00 through 5.30.00 Version 5.32.00 or later https://www.dell.com/support/home/product-support/product/secure-connect-gateway-app-edition/drivers
Secure Connect Gateway-Appliance Versions 5.26.00 through 5.30.00 Version 5.32.00 or later https://www.dell.com/support/home/product-support/product/secure-connect-gateway-ve/drivers

 

Product Affected Versions Remediated Versions Link
Secure Connect Gateway-Application Versions 5.26.00 through 5.30.00 Version 5.32.00 or later https://www.dell.com/support/home/product-support/product/secure-connect-gateway-app-edition/drivers
Secure Connect Gateway-Appliance Versions 5.26.00 through 5.30.00 Version 5.32.00 or later https://www.dell.com/support/home/product-support/product/secure-connect-gateway-ve/drivers

 

Revision History

RevisionDateDescription
1.02025-10-29Initial Release

 

Acknowledgements

CVE-2025-46363: Dell would like to thank Ahmed Y. Elmogy for reporting this issue.

Related Information

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Yasal Uyarı

Etkilenen Ürünler

Secure Connect Gateway, Secure Connect Gateway - Application Edition, Secure Connect Gateway - Virtual Edition
Makale Özellikleri
Article Number: 000385239
Article Type: Dell Security Advisory
Son Değiştirme: 29 Eki 2025
Sorularınıza diğer Dell kullanıcılarından yanıtlar bulun
Destek Hizmetleri
Aygıtınızın Destek Hizmetleri kapsamında olup olmadığını kontrol edin.