Lucene search
DellCVE-2022-34425HistoryOct 10, 2022 - 9:15 p.m.
CVE-2022-34425
2022-10-1021:15:11
CWE-798
CWE-321
dell
web.nvd.nist.gov
29
5
dell
enterprise
sonic os
4.0.0
4.0.1
ssh
cryptographic key
vulnerability
unauthorized access
nvd
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.003
Percentile
68.4%
Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication.
Affected configurations
Node
dellenterprise_sonic_distributionMatch4.0.0
ORdellenterprise_sonic_distributionMatch4.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | enterprise_sonic_distribution | 4.0.0 | cpe:2.3:o:dell:enterprise_sonic_distribution:4.0.0:*:*:*:*:*:*:* |
| dell | enterprise_sonic_distribution | 4.0.1 | cpe:2.3:o:dell:enterprise_sonic_distribution:4.0.1:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Dell",
"product": "Enterprise SONiC OS",
"versions": [
{
"version": "unspecified",
"lessThan": "4.0.2",
"status": "affected",
"versionType": "custom"
}
]
}
]Social References
More
Related
cnvd
cnvd
Dell Enterprise SONiC OS has an unspecified vulnerability
2022-10-11 00:00:00
cvelist
cvelist
CVE-2022-34425
2022-10-10 20:55:10
nvd
nvd
CVE-2022-34425
2022-10-10 21:15:11
prion
prion
Design/Logic Flaw
2022-10-10 21:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.003
Percentile
68.4%
Related for CVE-2022-34425