Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-32484

CVE-2023-32484

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell Enterprise SONiC OS

Default version status: unaffected

  • 3.5.xaffected
  • 4.0.xaffected
  • 4.1.0affected

References