// For flags

CVE-2023-32462

 

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track
*SSVC
Descriptions

Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands and possible system takeover. This is a critical vulnerability as it allows an attacker to cause severe damage. Dell recommends customers to upgrade at the earliest opportunity.

Los conmutadores de red Dell OS10 que ejecutan 10.5.2.x y versiones posteriores contienen una vulnerabilidad de inyección de comandos del sistema operativo cuando se utiliza la autenticación de usuario remota. Un atacante remoto no autenticado podría explotar esta vulnerabilidad, lo que llevaría a la ejecución de comandos arbitrarios del sistema operativo y una posible toma de control del sistema. Esta es una vulnerabilidad crítica ya que permite que un atacante cause daños graves. Dell recomienda a los clientes actualizar lo antes posible.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:Track
Exploitation
None
Automatable
No
Tech. Impact
Partial
* Organization's Worst-case Scenario
Timeline
  • 2023-05-09 CVE Reserved
  • 2024-02-15 CVE Published
  • 2024-02-16 EPSS Updated
  • 2024-08-02 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-20: Improper Input Validation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Dell
Search vendor "Dell"
 Dell SmartFabric OS10
Search vendor "Dell" for product "Dell SmartFabric OS10"
 10.5.5.0
Search vendor "Dell" for product "Dell SmartFabric OS10" and version "10.5.5.0"
en
Affected
Dell
Search vendor "Dell"
 Dell SmartFabric OS10
Search vendor "Dell" for product "Dell SmartFabric OS10"
 10.5.5.3
Search vendor "Dell" for product "Dell SmartFabric OS10" and version "10.5.5.3"
en
Affected
Dell
Search vendor "Dell"
 Dell SmartFabric OS10
Search vendor "Dell" for product "Dell SmartFabric OS10"
 10.5.5.1
Search vendor "Dell" for product "Dell SmartFabric OS10" and version "10.5.5.1"
en
Affected
Dell
Search vendor "Dell"
 Dell SmartFabric OS10
Search vendor "Dell" for product "Dell SmartFabric OS10"
 10.5.5.2
Search vendor "Dell" for product "Dell SmartFabric OS10" and version "10.5.5.2"
en
Affected
Dell
Search vendor "Dell"
 Dell SmartFabric OS10
Search vendor "Dell" for product "Dell SmartFabric OS10"
 10.5.4.6
Search vendor "Dell" for product "Dell SmartFabric OS10" and version "10.5.4.6"
en
Affected