Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-45765

Опубликовано: 08 нояб. 2024
Источник: nvd
CVSS3: 9.1
CVSS3: 7.2
EPSS Низкий

Описание

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability as it allows high privilege OS commands to be executed with a less privileged role; so Dell recommends customers to upgrade at the earliest opportunity.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:dell:enterprise_sonic_distribution:*:*:*:*:*:*:*:*
Версия от 4.1.0 (включая) до 4.1.6 (исключая)
cpe:2.3:o:dell:enterprise_sonic_distribution:*:*:*:*:*:*:*:*
Версия от 4.2.0 (включая) до 4.2.2 (исключая)

EPSS

Процентиль: 57%
0.00357
Низкий

9.1 Critical

CVSS3

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 9.1
github
около 1 года назад

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability as it allows high privilege OS commands to be executed with a less privileged role; so Dell recommends customers to upgrade at the earliest opportunity.

EPSS

Процентиль: 57%
0.00357
Низкий

9.1 Critical

CVSS3

7.2 High

CVSS3

Дефекты

CWE-78