CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS are affected by an Insertion of Sensitive Information into Log File vulnerability in versions prior to 4.4.1 and 4.2.3. The described impact is information exposure via remote access by a high-privilege attacker. The Connected documents indicat...

CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS, versions prior to 4.4.1 and 4.2.3, contains an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...

Dell Networking Switches running Enterprise SONiC 日志信息泄露漏洞

Dell Networking Switches running Enterprise SONiC OS is an open-source based network operating system from Dell, designed for data center and cloud computing scenarios, supporting a unified network architecture from edge to core to cloud. A log information disclosure vulnerability exists in Dell...

PT-2025-4867 · Dell · Enterprise Sonic

Name of the Vulnerable Software and Affected Versions: Dell Networking Switches running Enterprise SONiC OS versions prior to 4.4.1 and 4.2.3 Description: The issue concerns an Insertion of Sensitive Information into Log File, which could be exploited by a high privileged attacker with remote...

USN-7233-1 linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Multiple devices driver; - Network drivers; - Mellanox network drivers; - S/390 drivers; - SCSI subsystem; - Sonic...

Sonic and Injective Team Up to Build Industry’s First Cross-Chain Smart Agent Hub with Solana

Sonic, the leading gaming SVM on Solana, and Injective, a WASM-based L1 network, today announced that they will…...

The vulnerability of Dell Enterprise SONiC operating systems lies in the lack of measures to neutralize special elements used in the operating system commands, allowing attackers to execute arbitrary commands.

The vulnerability of Dell Enterprise SONiC operating systems lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2024-9235 · Sonicwall · Sonicwall Sma100 Sslvpn

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 SSLVPN affected versions not specified Description: A vulnerability in the SonicWall SMA100 SSLVPN web management interface allows remote attackers to cause a stack-based buffer overflow, potentially leading to code execution...

CVE-2024-45763

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a...

CVE-2024-45763

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a...

CVE-2024-45763

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a...

CVE-2024-45763

Dell Enterprise SONiC OS versions 4.1.x–4.2.x are affected by an OS Command Injection due to improper neutralization of special elements in commands. A high-privilege attacker with remote access could execute arbitrary commands, impacting confidentiality, integrity, and availability. Remediation ...

CVE-2024-45763

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a...

CVE-2024-45764

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell...

CVE-2024-45765

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a...

CVE-2024-45764

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell...

CVE-2024-45765

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a...

CVE-2024-45764

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell...

CVE-2024-45764

Dell Enterprise SONiC OS versions 4.1.x and 4.2.x contain a Missing Critical Step in Authentication vulnerability that could allow an unauthenticated, remote attacker to bypass protections. The issue is described as critical (CVSS v3.1 base score up to 9.8) with network access and no user interac...

CVE-2024-45764

Dell Enterprise SONiC OS, versions 4.1.x, 4.2.x, contains a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell...