CVE-2013-3594

2014-01-2004:58:49

CWE-20

[email protected]

web.nvd.nist.gov

cve-2013-3594

ssh

dell powerconnect

denial of service

code execution

vulnerability

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.3 High

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.7%

JSON

The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device reset) or possibly execute arbitrary code by sending many packets to TCP port 22.

Affected configurations

NVD

Node

dellpowerconnect_3348Match1.2.1.3

dellpowerconnect_3524pMatch2.0.0.48

dellpowerconnect_5324Match2.0.1.4

CPENameOperatorVersion
dell:powerconnect_3348dell powerconnect 3348eq1.2.1.3
dell:powerconnect_3524pdell powerconnect 3524peq2.0.0.48
dell:powerconnect_5324dell powerconnect 5324eq2.0.1.4

CPE	Name	Operator	Version
dell:powerconnect_3348	dell powerconnect 3348	eq	1.2.1.3
dell:powerconnect_3524p	dell powerconnect 3524p	eq	2.0.0.48
dell:powerconnect_5324	dell powerconnect 5324	eq	2.0.1.4