CVE-2023-39248: falha de alta gravidade em Dell Networking OS10
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.7%
Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network users. This is a high severity vulnerability as it allows an attacker to cause an outage of network. Dell recommends customers to upgrade at the earliest opportunity.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Dell · Dell Networking OS10CVEs relacionadas — Dell Networking OS10
No mesmo produto, das mais perigosas para as menos.
CVE-2021-36310MEDIUMCVE-2021-36310EPSS 0.8%CVE-2022-34424HIGHCVE-2022-34424EPSS 0.7%CVE-2018-15784HIGHDSA-2019-001: Dell Networking OS10 Improper Certificate Validation VulnerabilityEPSS 0.6%CVE-2022-29089MEDIUMCVE-2022-29089EPSS 0.6%CVE-2022-34394LOWCVE-2022-34394EPSS 0.4%CVE-2018-15778HIGHDSA-2019-019: Dell Networking OS10 OS Command Injection VulnerabilityEPSS 0.4%