Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2019-3710

DSA-2019-034: Dell EMC Networking OS10 Undocumented Default Cryptographic Key Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

Dell EMC Networking OS10 versions prior to 10.4.3 contain a cryptographic key vulnerability due to an underlying application using undocumented, pre-installed X.509v3 key/certificate pairs. An unauthenticated remote attacker with the knowledge of the default keys may potentially be able to intercept communications or operate the system with elevated privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell EMC Dell EMC Networking OS10

  • unspecified to < 10.4.3.0affected

References