Priority MEDIUM 40
Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00444 · Published 2024-06-12 · No fix listed CWE-285
Priority MEDIUM 40
Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switches are configured with VLT and VRRP.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.007 · Published 2023-12-05 · No fix listed CWE-400
Priority LOW 16
Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00237 · Published 2021-11-20 · Fixed in 10.5.1.x CWE-665
Priority LOW 24
Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.0084 · Published 2021-11-20 · Fixed in 10.5.3.4 CWE-693
Priority MEDIUM 48
Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03309 · Published 2021-11-20 · Fixed in OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc CWE-288
Priority MEDIUM 40
Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00904 · Published 2021-11-20 · Fixed in OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc CWE-269
Priority MEDIUM 48
Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0369 · Published 2021-11-20 · Fixed in OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc CWE-287
Priority LOW 38
Dell OS10 versions prior to 10.4.2.1 contain a vulnerability caused by lack of proper input validation on the command-line interface (CLI).
CVSS 3.0HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.00373 · Published 2019-02-04 · No fix listed CWE-20
Priority LOW 33
Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake.
CVSS 3.0HIGH 7.4· Network · No auth · No interaction · EPSS 0.0061 · Published 2019-01-18 · Fixed in 10.4.3.0 CWE-295
THREATIST.IORead the docs