Enterprise Sonic Distribution
Approved changes feed: RSS · Atom
cpe:2.3:o:dell:enterprise_sonic_distribution:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Enterprise Sonic Distribution (bb595da7-c397-5a1c-98c7-a73588e65562) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-23374 |
vulnerable | 2026-06-08 07:10:55.601540 |
Details available
HIGH (8)
Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Published: 2025-01-30T04:14:04.226Z
Updated: 2025-01-30T15:10:24.732Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45765 |
vulnerable | 2026-06-08 06:48:09.006129 |
Details available
CRITICAL (9.1)
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability as it allows high privilege OS commands to be executed with a less privileged role; so Dell recommends customers to upgrade at the earliest opportunity.
Published: 2024-11-08T15:59:33.760Z
Updated: 2024-11-08T17:03:50.218Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45764 |
vulnerable | 2026-06-08 06:48:09.005560 |
Details available
CRITICAL (9)
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.
Published: 2024-11-08T16:08:01.769Z
Updated: 2024-11-08T17:03:26.047Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45763 |
vulnerable | 2026-06-08 06:48:09.003119 |
Details available
CRITICAL (9.1)
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.
Published: 2024-11-08T16:15:34.861Z
Updated: 2024-11-13T18:39:26.443Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32484 |
vulnerable | 2026-06-08 06:04:46.405495 |
Details available
CRITICAL (9.8)
Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.
Published: 2024-02-15T12:49:01.000Z
Updated: 2024-08-27T18:15:39.590Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-24574 |
vulnerable | 2026-06-08 05:56:05.980337 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.