Known vulnerabilities in Dell Enterprise SONiC OS

Is your version affected?

CVE	Summary	Score	Published
CVE-2025-38741	Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH	7.5 High	Aug 4, 2025
CVE-2025-23374	Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of…	8.0 High	Jan 30, 2025
CVE-2024-45763	Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in…	9.1 Critical	Nov 8, 2024
CVE-2024-45764	Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability	9.0 Critical	Nov 8, 2024
CVE-2024-45765	Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in…	9.1 Critical	Nov 8, 2024
CVE-2023-32484	Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input…	9.8 Critical	Feb 15, 2024
CVE-2023-24574	Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in…	7.5 High	Feb 2, 2023
CVE-2022-34425	Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH	7.5 High	Oct 10, 2022
CVE-2021-36309	Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability	7.1 High	Oct 1, 2021