Skip to content
OpenAdvisories
High · 7.1 CVE-2021-36309 EUVD-2021-22929GHSA-7vj7-47pr-4hg8

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious…

Published Oct 1, 2021 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks.

Affected products

VendorProductAffectedFixed
Dell Enterprise SONiC OS unspecified – < 3.4.0 3.4.0

References