CVE-2024-45763criticalCWE-78

CVE-2024-45763: falha crítica em Dell Enterprise SONiC OS

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Enterprise SONiC OS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.1epss 1.4%
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Dell · Enterprise SONiC OS
CVEs relacionadas — Dell Enterprise SONiC OS

No mesmo produto, das mais perigosas para as menos.

CVE-2024-45765CRITICALCVE-2024-45765EPSS 1.4%CVE-2022-34425HIGHCVE-2022-34425EPSS 0.9%CVE-2023-24574HIGHCVE-2023-24574EPSS 0.9%CVE-2021-36309HIGHCVE-2021-36309EPSS 0.6%CVE-2023-32484CRITICALCVE-2023-32484EPSS 0.6%CVE-2024-45764CRITICALCVE-2024-45764EPSS 0.5%