Skip to content
OpenAdvisories
High · 7.5 CVE-2023-24574 EUVD-2023-28590GHSA-5c48-7h6p-5x58

Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication compo…

Published Feb 2, 2023 · Updated Mar 27, 2025 · Assigned by dell

Description

Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication component. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to uncontrolled resource consumption by creating permanent home directories for unauthenticated users.

Affected products

VendorProductAffectedFixed
Dell Enterprise SONiC OS ≤ 3.5.3, 3.5.4, 4.0.0, 4.0.1, 4.0.2 —

References