Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rvh8-pqvg-cw88

Опубликовано: 15 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.

EPSS

Процентиль: 36%
0.00149
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.

CVSS3: 9.8
fstec
больше 2 лет назад

Уязвимость операционных систем Dell Enterprise SONiC, связанная с недостаточной проверкой входных данных, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 36%
0.00149
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20