CVE-2022-34394

Dell OS10 (version 10.5.3.4) contains an Improper Certificate Validation vulnerability in the Support Assist component. A remote unauthenticated attacker could perform a man‑in‑the‑middle to access limited switch configuration data. The root cause is TLS certificate validation failure within Supp...

CVE-2022-29089

Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and access the REST A...

CVE-2022-29089

Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and access the REST A...

CVE-2022-29089

Summary (CVE-2022-29089) Dell Networking OS10 with Smart Fabric Services enabled is affected. Prior to October 2021 releases have an information-disclosure vulnerability that could allow a remote, unauthenticated attacker to reverse‑engineer to obtain sensitive data and potentially access the RES...

Dell SmartFabric OS10 缓冲区错误漏洞

Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell, USA. A security vulnerability exists in Dell SmartFabric OS10 versions 10.5.1.x, 10.5.2.x, and 10.5.3.x. The vulnerability stems from the fact that an attacker can cause a system crash by running a specific security...

PT-2022-22161 · Os10 · Os10

Name of the Vulnerable Software and Affected Versions: Networking OS10 versions 10.5.1.x through 10.5.3.x Description: The issue allows an attacker to cause a system crash by running particular security scans. Recommendations: For versions 10.5.1.x through 10.5.3.x, consider restricting security...

PT-2022-19405 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell Networking OS10 versions prior to October 2021 Description: The issue allows a remote, unauthenticated attacker to potentially exploit it by reverse engineering to retrieve sensitive information and access the REST API with admin...

The vulnerability of the RESTCONF API application programming interface implementation of the SmartFabric OS10 network operating system allows a perpetrator to gain unauthorized access to the system.

The vulnerability of the RESTCONF API application programming interface of the SmartFabric OS10 network operating system is related to the possibility of bypassing authentication. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the...

The vulnerability of the RESTCONF API application programming interface implementation of the SmartFabric OS10 network operating system allows a perpetrator to escalate their privileges.

The vulnerability of the RESTCONF API application programming interface for the SmartFabric OS10 network operating system is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to escalate their privileges remotely...

PT-2022-4980 · Dell · Dell Os10

Name of the Vulnerable Software and Affected Versions: Dell OS10 version 10.5.3.4 Description: The issue is related to an Improper Certificate Validation vulnerability in the Support Assist component. This could allow a remote unauthenticated attacker to exploit the vulnerability, leading to...

Dell Networking OS10 Authentication Bypass Vulnerability (CNVD-2021-99661)

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. An authentication bypass vulnerability exists in Dell Networking OS10 version with Smart Fabric services enabled by October 2021. An unauthenticated, remote attacker could exploit the vulnerability to gain...

Dell Networking OS10 Elevation of Privilege Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. An elevation of privilege vulnerability exists in Dell Networking OS10, which could be exploited by an attacker with specific API access to gain administrator privileges on the affected system...

Dell Networking OS10 Information Disclosure Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL, Inc. Dell Networking OS10 is vulnerable to information disclosure, which can be exploited by a low-privilege authenticated attacker to gain access to SNMP authentication failure messages...

Dell Networking OS10 Resource Management Error Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. Dell Networking OS10 is vulnerable to a resource management error that could be exploited by attackers to cause a denial of service...

Dell Networking OS10 Authentication Bypass Vulnerability

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. Dell Networking OS10 is vulnerable to an authentication bypass vulnerability that could be exploited by attackers to gain access to the affected system and perform operations...

CVE-2021-36319

Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can gain access to SNMP authentication failure messages...

CVE-2021-36307

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system...

CVE-2021-36307

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system...

CVE-2021-36306

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system...

CVE-2021-36310

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...