Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-09-09T15:17:10.363Z",
  "pubdate": "2026-09-09T15:17:10.363Z",
  "executiveSummary": "A command injection vulnerability exists within Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions. The vulnerability arises from improper neutralization of special elements used in system commands, allowing for potential script injection.\nThis flaw enables an unauthenticated, remote attacker to execute arbitrary commands or scripts on the underlying host operating system.\nThe vulnerability poses a severe risk to confidentiality, integrity, and availability, as unauthorized remote code execution typically grants an attacker full control over the appliance.\nAffected software includes Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00.\nNo authentication is required for an attacker to leverage this vulnerability, significantly increasing the attack surface and ease of exploitation for remote adversaries targeting exposed management interfaces.",
  "technicalDetails": "The vulnerability is classified as an Improper Neutralization of Special Elements used in a Command (CWE-77). It exists because the Dell SCG 5.0 application fails to adequately sanitize user-supplied input before passing it to an underlying system shell or command-line interface.\nThe root cause lies in insecure input handling where untrusted data is concatenated into command strings. When the application processes specific requests, it fails to perform rigorous validation or escape character filtering on parameters. This deficiency allows an attacker to inject shell metacharacters such as ';', '|', '&', or '$()' into the input stream.\nThe exploitation flow begins with the attacker crafting a malicious payload containing system-level commands, which is delivered via network requests to the vulnerable Dell SCG component. Because the application processes these requests without authentication, the attacker does not require established credentials to initiate the injection process.\nUpon receiving the malicious request, the application passes the unsanitized input directly to the command interpreter. The shell interprets the injected metacharacters, causing the intended application logic to be bypassed or supplemented by the attacker's arbitrary commands. This results in the execution of the payload within the context of the application's service account or the appliance's root context, depending on the service privilege level.\nThe impact of a successful exploit includes the ability to execute unauthorized scripts, facilitate lateral movement within the network, exfiltrate sensitive configuration data, or modify appliance settings. Post-exploitation activities may include the installation of persistent backdoors or the deployment of secondary malicious payloads, effectively compromising the appliance's role as a secure gateway. The vulnerability remains present in all identified versions of Dell SCG 5.0 Appliance below 5.36.00.16 and Dell SCG 5.0 Application below 5.36.00.00."
}