Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands and possible system takeover. This is a critical vulnerability as it allows an attacker to cause severe damage. Dell recommends customers to upgrade at the earliest opportunity.
References
Configurations
Configuration 1 (hide)
|
History
23 Jan 2025, 17:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.dell.com/support/kbdoc/en-us/000216584/dsa-2023-124-security-update-for-dell-smartfabric-os10-multiple-vulnerabilities - Vendor Advisory | |
| CPE | cpe:2.3:o:dell:smartfabric_os10:10.5.5.0:*:*:*:*:*:*:* cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:* cpe:2.3:o:dell:smartfabric_os10:10.5.5.3:*:*:*:*:*:*:* cpe:2.3:o:dell:smartfabric_os10:10.5.5.2:*:*:*:*:*:*:* cpe:2.3:o:dell:smartfabric_os10:10.5.5.1:*:*:*:*:*:*:* |
|
| CWE | CWE-78 | |
| First Time |
Dell smartfabric Os10
Dell |
21 Nov 2024, 08:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.dell.com/support/kbdoc/en-us/000216584/dsa-2023-124-security-update-for-dell-smartfabric-os10-multiple-vulnerabilities - |
15 Feb 2024, 14:28
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-15 13:15
Updated : 2025-01-23 17:02
NVD link : CVE-2023-32462
Mitre link : CVE-2023-32462
CVE.ORG link : CVE-2023-32462
JSON object : View
Products Affected
dell
- smartfabric_os10