CVE-2022-29089mediumCWE-522

CVE-2022-29089: medium-severity vulnerability in Dell Networking OS10

Published · Updated

Follow this CVE+ Monitor Dell Networking OS10

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.4epss 0.6%
Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and access the REST API with admin privileges.
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Affected products
Dell · Dell Networking OS10
Related CVEs — Dell Networking OS10

In the same product, most dangerous first.

CVE-2021-36310MEDIUMCVE-2021-36310EPSS 0.8%CVE-2022-34424HIGHCVE-2022-34424EPSS 0.7%CVE-2023-39248HIGHCVE-2023-39248EPSS 0.7%CVE-2018-15784HIGHDSA-2019-001: Dell Networking OS10 Improper Certificate Validation VulnerabilityEPSS 0.6%CVE-2022-34394LOWCVE-2022-34394EPSS 0.4%CVE-2018-15778HIGHDSA-2019-019: Dell Networking OS10 OS Command Injection VulnerabilityEPSS 0.4%