Command Injection Vulnerability in Dell Secure Connect Gateway

Dell Secure Connect Gateway (SCG) versions 5.0 are affected by a critical command injection vulnerability identified as CVE-2026-79941. The flaw stems from improper neutralization of special elements used in system commands, enabling an unauthenticated remote attacker to inject malicious scripts. This vulnerability impacts both the SCG Appliance (fixed in version 5.36.00.16) and the SCG Application (fixed in version 5.36.00.00). Successful exploitation could allow an attacker to execute arbitrary commands within the context of the appliance or application, leading to a full compromise of the affected gateway. Given the administrative nature of SCG, which typically manages connectivity for hardware infrastructure, this represents a significant risk to the integrity of the network management environment.

Impact

Successful exploitation of this vulnerability grants an unauthenticated attacker remote command execution capabilities on the affected Dell SCG appliance or application. This can lead to unauthorized access to management functions, potential exfiltration of sensitive configuration data, or lateral movement within the network from the compromised appliance. The vulnerability carries a CVSS v3.1 base score of 9.8, reflecting its high impact and ease of exploitability via remote, unauthenticated channels.

Recommendation

• Upgrade all Dell Secure Connect Gateway (SCG) Appliance instances to version 5.36.00.16 or later.
• Upgrade all Dell Secure Connect Gateway (SCG) Application instances to version 5.36.00.00 or later.
• Restrict network access to the SCG web management interface to trusted administrative subnets only.
• Audit network logs for anomalous HTTP requests targeting the SCG management interface that utilize shell metacharacters or encoded payloads.