9.0
Critical
CVE-2024-45764 Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability
Description
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Enterprise SONiC OS 4.2 | earliest → < 4.2.2 | 4.2.2 |
| Enterprise SONiC OS 4.1 | earliest → < 4.1.6 | 4.1.6 |
| enterprise_sonic_os 4.2 | 4.2.0 → < 4.2.2 | 4.2.2 |
| enterprise_sonic_os 4.1 | 4.1.0 → < 4.1.6 | 4.1.6 |
Other CVEs of Enterprise SONiC OS
The 9 CVEs of Enterprise SONiC OS →
CVE-2025-38741
Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH
7.5
High
CVE-2025-23374
Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of…
8.0
High
CVE-2024-45763
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in…
9.1
Critical
CVE-2024-45765
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in…
9.1
Critical