CVE-2018-15778high

CVE-2018-15778: high-severity vulnerability in Dell Networking OS10

DSA-2019-019: Dell Networking OS10 OS Command Injection Vulnerability

Published · Updated

Follow this CVE+ Monitor Dell Networking OS10

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.4%
Dell OS10 versions prior to 10.4.2.1 contain a vulnerability caused by lack of proper input validation on the command-line interface (CLI).
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Dell · Dell Networking OS10
Related CVEs — Dell Networking OS10

In the same product, most dangerous first.

CVE-2021-36310MEDIUMCVE-2021-36310EPSS 0.8%CVE-2022-34424HIGHCVE-2022-34424EPSS 0.7%CVE-2023-39248HIGHCVE-2023-39248EPSS 0.7%CVE-2018-15784HIGHDSA-2019-001: Dell Networking OS10 Improper Certificate Validation VulnerabilityEPSS 0.6%CVE-2022-29089MEDIUMCVE-2022-29089EPSS 0.6%CVE-2022-34394LOWCVE-2022-34394EPSS 0.4%