Lucene search

K
DellEnterprise Sonic Distribution*

6 matches found

CVE
CVE
added 2024/11/08 5:15 p.m.66 views

CVE-2024-45763

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This i...

9.1CVSS7AI score0.00249EPSS
CVE
CVE
added 2024/11/08 4:15 p.m.53 views

CVE-2024-45764

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so De...

9.8CVSS7.1AI score0.00286EPSS
CVE
CVE
added 2025/01/30 5:15 a.m.49 views

CVE-2025-23374

Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

8CVSS7.5AI score0.00043EPSS
CVE
CVE
added 2024/11/08 4:15 p.m.46 views

CVE-2024-45765

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This i...

9.1CVSS7AI score0.00249EPSS
CVE
CVE
added 2023/02/02 9:22 p.m.34 views

CVE-2023-24574

Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication component. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to uncontrolled resource consumption by creating permanent home d...

7.5CVSS7.7AI score0.00583EPSS
CVE
CVE
added 2024/02/15 1:15 p.m.25 views

CVE-2023-32484

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vul...

9.8CVSS9.6AI score0.00149EPSS