Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Dell Networking OS OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc Clear all filters
TI-2021-14672 CVE-2021-36308 · GHSA-3558-879f-7722

Authentication bypass in Dell Networking OS

Priority MEDIUM 48

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03309 Published 2021-11-20 Fixed in OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc CWE-288
TI-2021-14671 CVE-2021-36307 · GHSA-4xph-r595-wp4r

Improper privilege management in Dell Networking OS

Priority MEDIUM 40

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00904 Published 2021-11-20 Fixed in OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc CWE-269
TI-2021-14670 CVE-2021-36306 · GHSA-7mjp-h9mr-4jw2

Improper authentication in Dell Networking OS

Priority MEDIUM 48

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0369 Published 2021-11-20 Fixed in OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc CWE-287