CVE-2026-80171

Analyzed Analyzed - Analysis Complete

Insufficient Entropy in PRNG in Dell SCG 5.0

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Entropy in PRNG vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-80171

EUVD

EUVD-2026-74827

Affected Vendors & Products

Vendor	Product	Version / Range
dell	secure_connect_gateway	to 5.36.00.00 (exc)
dell	secure_connect_gateway	to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-331	The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

Attack-Flow Graph

Executive Summary

This vulnerability is an Insufficient Entropy in PRNG (Pseudo-Random Number Generator) issue in Dell SCG 5.0 Appliance and Application versions before 5.36.00.16 and 5.36.00.00 respectively. It allows a low-privileged attacker with local access to exploit weak randomness in the system, potentially leading to privilege escalation.

Detection Guidance

Detection of this vulnerability requires checking the installed version of Dell SCG 5.0 Appliance or Application. Compare the version against 5.36.00.16 (Appliance) or 5.36.00.00 (Application). If versions are older, the system is vulnerable.

Impact Analysis

If you use Dell SCG 5.0 Appliance or Application with versions prior to 5.36.00.16 or 5.36.00.00, an attacker with local access could exploit this to gain higher privileges on your system, potentially allowing unauthorized actions or data access.

Compliance Impact

The vulnerability involves insufficient entropy in a PRNG, allowing low-privileged attackers to elevate privileges locally. This could lead to unauthorized access or data manipulation, which may impact compliance with standards like GDPR (data integrity) or HIPAA (access controls). However, specific compliance impacts are not detailed in the provided context.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the insufficient entropy in PRNG vulnerability.

Hi! I’m here to help you understand CVE-2026-80171. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70