CVE-2021-36307

CVE-2021-36307 describes an elevation-of-privilege vulnerability in Dell Networking OS10 (Linux-based network switch OS) where a malicious low-privilege user with access to RESTCONF/API endpoints could obtain administrator privileges. Affected: OS10 versions prior to October 2021 with RESTCONF AP...

CVE-2021-36308

CVE-2021-36308 affects Dell Networking OS10 (versions with Smart Fabric Services enabled prior to October 2021). The vulnerability is an authentication bypass that allows a remote, unauthenticated attacker to gain access and perform actions on the affected system. Documents consistently describe ...

CVE-2021-36319

CVE-2021-36319 affecting Dell Networking OS10: vulnerable in OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x. A low-privilege authenticated attacker can access SNMP authentication failure messages, exposing confidential information. Root cause is information disclosure via SNMP failure detail. No r...

CVE-2021-36310

Dell Networking OS10 (Dell) is affected: versions 10.4.3.x through 10.5.2.x contain an uncontrolled resource consumption flaw in the API service that can be exploited by a high-privileged API user to cause a denial of service. The issue is described in PT-2021-21212 with a remediation that recomm...

CVE-2018-15784

Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature where the TLS handshake does not properly validate the server certificate authority. This misvalidation could allow an attacker to perform a MITM attack by presenting an invalid or malicious certific...

CVE-2021-36306

CVE-2021-36306 affects Dell Networking OS10, specifically versions prior to October 2021 with RESTCONF API enabled. The root cause is an authentication bypass in the RESTCONF interface, enabling a remote unauthenticated attacker to gain access and perform actions on the affected system. The conne...

CVE-2018-15778

CVE-2018-15778 affects Dell OS10 OS switch software; a lack of proper input validation in the CLI on Dell OS10 versions prior to 10.4.2.1 enables a command injection vulnerability. According to CNVD-2019-24558, an attacker could exploit this flaw to execute commands directly on the OS (local acce...