by Kastro CVE-2024-45764
Dell Enterprise SONiC OS — Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability.
Description · from the CVE record
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.
Affected
ProductAffectedFixed inSource
Enterprise SONiC OSN/A – < 4.1.64.1.6CNA
Enterprise SONiC OSN/A – < 4.2.24.2.2CNA
enterprise_sonic_os4.1.0 – < 4.1.64.1.6CISA-ADP
enterprise_sonic_os4.2.0 – < 4.2.24.2.2CISA-ADP
Scores by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
dell (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total