CVE-2018-15784

DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability

High · published January 18, 2019

CVSS v3.0
7.4
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.

The record
Technical detail
CVSS v3.0
7.4 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00610 · 48.3th percentile
Published
2019-01-18T22:00Z
EPSS history
Timeline
  • 18 JAN 22:00Z
    DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability
    cvelistv5