CVE-2022-29089: falha de média gravidade em Dell Networking OS10
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.4epss 0.6%
Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and access the REST API with admin privileges.
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Produtos afetados
Dell · Dell Networking OS10CVEs relacionadas — Dell Networking OS10
No mesmo produto, das mais perigosas para as menos.
CVE-2021-36310MEDIUMCVE-2021-36310EPSS 0.8%CVE-2022-34424HIGHCVE-2022-34424EPSS 0.7%CVE-2023-39248HIGHCVE-2023-39248EPSS 0.7%CVE-2018-15784HIGHDSA-2019-001: Dell Networking OS10 Improper Certificate Validation VulnerabilityEPSS 0.6%CVE-2022-34394LOWCVE-2022-34394EPSS 0.4%CVE-2018-15778HIGHDSA-2019-019: Dell Networking OS10 OS Command Injection VulnerabilityEPSS 0.4%