CVE-2026-73595 in Secure Connect Gateway Policy Manager
Summary
by MITRE • 09/29/2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution, Information disclosure, Information tampering, and Protection mechanism bypass.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 09/29/2026
The Dell Secure Connect Gateway Policy Manager software, specifically versions prior to 5.34.00.16 and those preceding version 5.36, contains a critical security flaw classified as a Download of Code Without Integrity Check vulnerability. This weakness stems from the application's failure to perform cryptographic verification or integrity validation on code artifacts downloaded during its operational lifecycle. In secure software architecture, any external input or remote resource that results in executable code must be verified against known good hashes or digital signatures to ensure it has not been altered by a third party. The absence of this check means the system trusts the source and content of downloaded components implicitly, creating a significant trust boundary violation within the application's security model.
An unauthenticated attacker with remote network access can exploit this vulnerability by intercepting or manipulating the communication channels used for code downloads. By employing techniques such as man-in-the-middle attacks on insecure protocols or compromising update servers if they are accessible via standard web services, an adversary can substitute legitimate software components with malicious payloads. Since the Policy Manager does not verify the integrity of these files before execution or installation, it will proceed to run the tampered code without raising any alarms. This lack of validation allows the attacker to inject arbitrary commands, scripts, or binaries directly into the system environment under the privileges granted to the vulnerable service account.
The operational impact of this vulnerability is severe and multifaceted. The primary consequence is remote code execution, which grants the attacker full control over the underlying operating system hosting the Policy Manager. This level of access facilitates comprehensive information disclosure, allowing the exfiltration of sensitive configuration data, user credentials, network topology details, and potentially encrypted traffic keys stored within the gateway's memory or database. Furthermore, the vulnerability enables information tampering, where an adversary can modify security policies to weaken firewall rules, disable logging mechanisms, or create backdoors for persistent access. Additionally, this flaw constitutes a protection mechanism bypass because it circumvents standard software update verification processes designed to prevent supply chain attacks and unauthorized modifications.
From a classification perspective, this vulnerability aligns with CWE-829, which describes the inclusion of functionality from untrusted control sources without proper integrity checks. It also maps closely to MITRE ATT&CK technique T1105, Ingress Tool Transfer, where attackers use legitimate system tools or protocols to move malicious code into a target environment. The exploitation path often correlates with T1190, Exploit Public-Facing Application, given the unauthenticated remote nature of the attack vector. Understanding these mappings is crucial for security teams aiming to detect similar behaviors in network traffic logs and endpoint monitoring systems.
To mitigate this risk, organizations must immediately apply the vendor-recommended patches by upgrading Dell Secure Connect Gateway Policy Manager to version 5.34.00.16 or later, including all subsequent releases within the 5.36 branch and beyond. Until patching is complete, network segmentation should be enforced to restrict access to the management interface from untrusted networks. Implementing strict outbound firewall rules that limit code downloads to verified, internal update servers can reduce exposure. Additionally, deploying intrusion detection systems configured with signatures for known exploit patterns related to this vulnerability can provide an additional layer of defense by alerting administrators to suspicious download activities or unauthorized file modifications within the application directory structure.