Read the docs

Dell

Records2082All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical222CVSS 9.0–10.0
CVSS high995CVSS 7.0–8.9

Exploited now

Dell records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Networking Os10 · all components

TI-2021-14672 CVE-2021-36308 · GHSA-3558-879f-7722

Authentication bypass in Dell Networking OS

Priority MEDIUM 48

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03309 Published 2021-11-20 Fixed in OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc CWE-288
Priority MEDIUM 48

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0369 Published 2021-11-20 Fixed in OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc CWE-287
Priority MEDIUM 40

Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00444 Published 2024-06-12 No fix listed CWE-285
Priority MEDIUM 40

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switches are configured with VLT and VRRP.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.007 Published 2023-12-05 No fix listed CWE-400
Priority MEDIUM 40

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00904 Published 2021-11-20 Fixed in OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc CWE-269
Priority LOW 24

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.0084 Published 2021-11-20 Fixed in 10.5.3.4 CWE-693
Open these records in search →