CVE-2022-34394: falha de baixa gravidade em Dell Networking OS10
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.7epss 0.4%
Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by attackers to conduct man-in-the-middle attacks to gain access to the Support Assist information.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
Dell · Dell Networking OS10CVEs relacionadas — Dell Networking OS10
No mesmo produto, das mais perigosas para as menos.
CVE-2021-36310MEDIUMCVE-2021-36310EPSS 0.8%CVE-2022-34424HIGHCVE-2022-34424EPSS 0.7%CVE-2023-39248HIGHCVE-2023-39248EPSS 0.7%CVE-2018-15784HIGHDSA-2019-001: Dell Networking OS10 Improper Certificate Validation VulnerabilityEPSS 0.6%CVE-2022-29089MEDIUMCVE-2022-29089EPSS 0.6%CVE-2018-15778HIGHDSA-2019-019: Dell Networking OS10 OS Command Injection VulnerabilityEPSS 0.4%