Sign-up

ID

VAR-202510-2077


CVE

CVE-2025-46363


TITLE

Dell Secure Connect Gateway relative path traversal vulnerability

Trust: 0.6

sources: CNVD: CNVD-2025-27580

DESCRIPTION

Dell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerability in the SCG exposed for an internal collection download REST API (if this REST API is enabled by Admin user from UI). A low privileged attacker with remote access could potentially exploit this vulnerability, leading to allowing relative path traversal to restricted resources. Dell Secure Connect Gateway is an enterprise-grade secure connectivity gateway device from Dell, primarily used to monitor hardware status, automatically create support requests, and ensure secure communication between devices and Dell backend services

Trust: 1.44

sources: NVD: CVE-2025-46363 // CNVD: CNVD-2025-27580

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-27580

AFFECTED PRODUCTS

vendor:dellmodel:secure connect gatewayscope:gteversion:5.26.00.00,<=5.30.00.00

Trust: 0.6

sources: CNVD: CNVD-2025-27580

CVSS

SEVERITY

CVSSV2

CVSSV3

security_alert@emc.com: CVE-2025-46363
value: MEDIUM

Trust: 1.0

CNVD: CNVD-2025-27580
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2025-27580
severity: MEDIUM
baseScore: 4.0
vectorString: AV:N/AC:L/AU:S/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

security_alert@emc.com: CVE-2025-46363
baseSeverity: MEDIUM
baseScore: 4.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 2.8
impactScore: 1.4
version: 3.1

Trust: 1.0

sources: CNVD: CNVD-2025-27580 // NVD: CVE-2025-46363

PROBLEMTYPE DATA

problemtype:CWE-23

Trust: 1.0

sources: NVD: CVE-2025-46363

PATCH

title:Patch for Dell Secure Connect Gateway relative path traversal vulnerabilityurl:https://www.cnvd.org.cn/patchInfo/show/752011

Trust: 0.6

sources: CNVD: CNVD-2025-27580

EXTERNAL IDS

db:NVDid:CVE-2025-46363

Trust: 1.6

db:CNVDid:CNVD-2025-27580

Trust: 0.6

sources: CNVD: CNVD-2025-27580 // NVD: CVE-2025-46363

REFERENCES

url:https://www.dell.com/support/kbdoc/en-us/000385239/dsa-2025-386-security-update-for-dell-secure-connect-gateway-rest-api

Trust: 1.0

url:https://nvd.nist.gov/vuln/detail/cve-2025-46363

Trust: 0.6

sources: CNVD: CNVD-2025-27580 // NVD: CVE-2025-46363

SOURCES

db:CNVDid:CNVD-2025-27580
db:NVDid:CVE-2025-46363

LAST UPDATE DATE

2025-11-19T23:32:10.231000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-27580date:2025-11-11T00:00:00
db:NVDid:CVE-2025-46363date:2025-11-04T15:41:56.843

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-27580date:2025-11-10T00:00:00
db:NVDid:CVE-2025-46363date:2025-10-30T16:15:35.580