2 matches found
CVE-2021-36309
Summary of CVE-2021-36309 : Dell Enterprise SONiC OS (Dell Enterprise SONiC OS) versions 3.3.0 and earlier are affected by an information-disclosure vulnerability. An authenticated attacker with system access can read sensitive information by abusing stored TACACS/RADIUS credentials. The impact i...
CVE-2025-38741
Dell Enterprise SONiC OS (Dell SONiC) on version 4.5.0 and earlier contains a cryptographic key vulnerability in SSH that could be exploited by an unauthenticated remote attacker to gain unauthorized access to communications. The connected Nessus note (DSA-2025-275) and vendor advisory indicate t...