High · 7.5 CVE-2022-34425 EUVD-2022-37380GHSA-rm98-77w2-p253

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentia…

Published Oct 10, 2022 · Updated Sep 17, 2024 · Assigned by dell

Vendor: Dell Product: Enterprise SONiC OS

Description

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication.

Affected products

Vendor	Product	Affected	Fixed
Dell	Enterprise SONiC OS	unspecified – < 4.0.2	4.0.2

References

https://www.dell.com/support/kbdoc/en-us/000203395/dsa-2022-257-dell-emc-enterprise-sonic-security-update-for-ssh-cryptographic-key-vulnerability