GCVE - cpe:2.3:a:dell:enterprise_sonic_os:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dell:enterprise_sonic_os:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Enterprise Sonic Os (`f4305bf1-5b68-5392-8a03-d8c928368b2d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-38741`	vulnerable	2026-06-08 07:23:06.384910	Details available HIGH (7.5) Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication. Published: 2025-08-04T18:22:00.580Z Updated: 2025-08-05T15:47:36.772Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000340083/dsa-2025-275-security-update-for-dell-enterprise-sonic-distribution-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-23374`	vulnerable	2026-06-08 07:10:55.600573	Details available HIGH (8) Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure. Published: 2025-01-30T04:14:04.226Z Updated: 2025-01-30T15:10:24.732Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000278568/dsa-2025-057-security-update-for-dell-enterprise-sonic-distribution-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45765`	vulnerable	2026-06-08 06:48:09.006103	Details available CRITICAL (9.1) Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability as it allows high privilege OS commands to be executed with a less privileged role; so Dell recommends customers to upgrade at the earliest opportunity. Published: 2024-11-08T15:59:33.760Z Updated: 2024-11-08T17:03:50.218Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000245655/dsa-2024-449-security-update-for-dell-enterprise-sonic-distribution-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45764`	vulnerable	2026-06-08 06:48:09.005421	Details available CRITICAL (9) Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity. Published: 2024-11-08T16:08:01.769Z Updated: 2024-11-08T17:03:26.047Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000245655/dsa-2024-449-security-update-for-dell-enterprise-sonic-distribution-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-45763`	vulnerable	2026-06-08 06:48:09.004019	Details available CRITICAL (9.1) Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity. Published: 2024-11-08T16:15:34.861Z Updated: 2024-11-13T18:39:26.443Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000245655/dsa-2024-449-security-update-for-dell-enterprise-sonic-distribution-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32484`	vulnerable	2026-06-08 06:04:46.404936	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24574`	vulnerable	2026-06-08 05:56:05.979736	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-34425`	vulnerable	2026-06-08 05:44:53.512880	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-36309`	vulnerable	2026-06-08 05:32:50.766939	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.