9.0
Critique
CVE-2024-45764 Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability
Description
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Enterprise SONiC OS 4.2 | premières → < 4.2.2 | 4.2.2 |
| Enterprise SONiC OS 4.1 | premières → < 4.1.6 | 4.1.6 |
| enterprise_sonic_os 4.2 | 4.2.0 → < 4.2.2 | 4.2.2 |
| enterprise_sonic_os 4.1 | 4.1.0 → < 4.1.6 | 4.1.6 |
Autres CVE de Enterprise SONiC OS
Les 9 CVE de Enterprise SONiC OS →
CVE-2025-38741
Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH
7.5
Élevée
CVE-2025-23374
Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of…
8.0
Élevée
CVE-2024-45763
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in…
9.1
Critique
CVE-2024-45765
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in…
9.1
Critique