Skip to content
OpenAdvisories
Critical · 9.0 CVE-2024-45764 EUVD-2024-41587GHSA-vp5v-7j7w-mjxh

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated a…

Published Nov 8, 2024 · Updated Nov 8, 2024 · Assigned by dell

Description

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.

Affected products

VendorProductAffectedFixed
Dell Enterprise SONiC OS N/A – < 4.1.6, N/A – < 4.2.2 4.1.6

References