CVE-2024-38486: Improper Neutralization of Special Elements used in a Command

Dell SmartFabric OS10 Software, versions 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to...

Dell SmartFabric OS10 安全漏洞

Dell SmartFabric OS10 is the operating system that runs on Dell EMC network devices and provides a range of networking functions and features. A cross-site request forgery vulnerability exists in Dell SmartFabric OS10, which can be exploited by a remote attacker to submit a specially crafted...

CVE-2024-39585: Use of Hard-coded Password

Dell SmartFabric OS10 Software, versions 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contains an Use of Hard-coded Password vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-side request forgery and Information disclosure...

Dell SmartFabric OS10 命令注入漏洞

Dell SmartFabric OS10 is an operating system from Dell for its switch products. A command execution vulnerability exists in Dell SmartFabric OS10. The vulnerability is due to an unsatisfactory neutralization "command injection" vulnerability in the affected version that contains special elements...

PT-2024-28542

Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions 10.5.5.4 through 10.5.5.10 and 10.5.6.x Description The issue involves the use of a hard-coded password in Dell SmartFabric OS10 Software. A low-privileged attacker with remote access could potentially...

CVE-2024-25949

Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated attacker could potentially exploit this vulnerability leading to escalation of privileges...

CVE-2024-25949

Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated attacker could potentially exploit this vulnerability leading to escalation of privileges...

CVE-2024-25949

Dell OS10 Networking Switches (versions 10.5.3.x to 10.5.6.x) are affected by an improper authorization vulnerability that could allow a remote authenticated attacker to achieve privilege escalation. The issue is documented across multiple sources (including NVD, CNNVD and PT-2024-21238) and Dell...

CVE-2024-25949: Improper Authorization

Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated attacker could potentially exploit this vulnerability leading to escalation of privileges...

Dell OS10 Networking Switches Information Disclosure Vulnerability

Dell OS10 Networking Switches is a switch from Dell USA. An information disclosure vulnerability exists in Dell OS10 Networking Switches, which can be exploited by attackers to cause information disclosure and denial of service...

Dell OS10 Networking Switches Command Execution Vulnerability

Dell OS10 Networking Switches is a switch from Dell USA. A command execution vulnerability exists in Dell OS10 Networking Switches, which can be exploited by an attacker to execute arbitrary commands on the system...

CVE-2023-32462

Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands and possible system...

CVE-2023-28078

Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability leading to information disclosure and a possible Denial of Service when a huge number of requests are...

Information disclosure

Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability leading to information disclosure and a possible Denial of Service when a huge number of requests are...

Command injection

Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands and possible system...

CVE-2023-32462

Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands and possible system...

CVE-2023-32462

Dell OS10 Networking Switches running 10.5.2.x and above have an OS command injection vulnerability in the remote user authentication path. The root cause is an OS command injection that allows a remote unauthenticated attacker to execute arbitrary OS commands, potentially taking over the system....

CVE-2023-32462

Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands and possible system...

CVE-2023-28078

Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability leading to information disclosure and a possible Denial of Service when a huge number of requests are...

CVE-2023-28078

Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability leading to information disclosure and a possible Denial of Service when a huge number of requests are...