CVE-2024-45763

Dell Enterprise SONiC OS versions 4.1.x–4.2.x are affected by an OS Command Injection due to improper neutralization of special elements in commands. A high-privilege attacker with remote access could execute arbitrary commands, impacting confidentiality, integrity, and availability. Remediation ...

CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS are affected by an Insertion of Sensitive Information into Log File vulnerability in versions prior to 4.4.1 and 4.2.3. The described impact is information exposure via remote access by a high-privilege attacker. The Connected documents indicat...

CVE-2024-45764

Dell Enterprise SONiC OS versions 4.1.x and 4.2.x contain a Missing Critical Step in Authentication vulnerability that could allow an unauthenticated, remote attacker to bypass protections. The issue is described as critical (CVSS v3.1 base score up to 9.8) with network access and no user interac...

CVE-2024-45765

Dell Enterprise SONiC OS (versions 4.1.x, 4.2.x) contains an OS command injection flaw due to improper neutralization of special elements. This could allow a remote, high-privilege attacker to execute OS commands with high privileges, as described in the CVE entry. Affected systems should be upgr...

CVE-2022-34425

Dell Enterprise SONiC OS versions 4.0.0–4.0.1 are affected by a cryptographic-key vulnerability in SSH caused by a hardcoded key, enabling an unauthenticated remote attacker to potentially access communications. The connected PT-2022-5021 entry provides concrete details and recommends immediate m...

CVE-2023-24574

CVE-2023-24574 affects Dell Enterprise SONiC OS versions 3.5.3, 4.0.0, 4.0.1, and 4.0.2. The issue is an Uncontrolled Resource Consumption vulnerability in the authentication component that allows an unauthenticated remote attacker to cause resource exhaustion by creating permanent home directori...

CVE-2023-32484

CVE-2023-32484 affects Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and earlier. The root cause is an improper input validation vulnerability in the Open Source SONiC-based stack used by Dell EMC Enterprise SONiC. A remote unauthenticated attacker could exploit t...