Vulnerability Description
Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Enterprise Sonic Distribution | >= 3.5.0, < 3.5.5 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/en-us/000216586/dsa-2023-284-security-update-Vendor Advisory
- https://www.dell.com/support/kbdoc/en-us/000216586/dsa-2023-284-security-update-Vendor Advisory
FAQ
What is CVE-2023-32484?
CVE-2023-32484 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this ...
How severe is CVE-2023-32484?
CVE-2023-32484 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-32484?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Enterprise Sonic Distribution.