ES
Product
Enterprise Sonic Distribution
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Enterprise Sonic Distribution to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-45764 | 9.8 | Nov 8 | Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability Affected: 4.1.0 before 4.1.6; 4.2.0 before 4.2.2 |
| CVE-2023-32484 | 9.8 | Feb 15 | Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability Affected: 3.5.0 before 3.5.5; 4.0.0 before 4.0.6; 4.1.0 |
| CVE-2023-24574 | 7.5 | Feb 2 | Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication component Affected: 3.5.3 before 4.0.3 |
| CVE-2022-34425 | 7.5 | Oct 10 | Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH Affected: 4.0.0; 4.0.1 |
| CVE-2024-45763 | 7.2 | Nov 8 | Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: 4.1.0 before 4.1.6; 4.2.0 before 4.2.2 |
| CVE-2024-45765 | 7.2 | Nov 8 | Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability Affected: 4.1.0 before 4.1.6; 4.2.0 before 4.2.2 |
| CVE-2025-23374 | 4.9 | Jan 30 | Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability Affected: before 4.2.3; 4.4.0 |
Showing 7