CVE-2018-15784high

CVE-2018-15784: high-severity vulnerability in Dell Networking OS10

DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability

Published · Updated

Follow this CVE+ Monitor Dell Networking OS10

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.4epss 0.6%
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Dell · Dell Networking OS10
Related CVEs — Dell Networking OS10

In the same product, most dangerous first.

CVE-2021-36310MEDIUMCVE-2021-36310EPSS 0.8%CVE-2022-34424HIGHCVE-2022-34424EPSS 0.7%CVE-2023-39248HIGHCVE-2023-39248EPSS 0.7%CVE-2022-29089MEDIUMCVE-2022-29089EPSS 0.6%CVE-2022-34394LOWCVE-2022-34394EPSS 0.4%CVE-2018-15778HIGHDSA-2019-019: Dell Networking OS10 OS Command Injection VulnerabilityEPSS 0.4%