CVE-2019-3710

DSA-2019-034: Dell EMC Networking OS10 Undocumented Default Cryptographic Key Vulnerability

High · published March 28, 2019

CVSS v3.0
8.3
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

Dell EMC Networking OS10 versions prior to 10.4.3 contain a cryptographic key vulnerability due to an underlying application using undocumented, pre-installed X.509v3 key/certificate pairs. An unauthenticated remote attacker with the knowledge of the default keys may potentially be able to intercept communications or operate the system with elevated privileges.

The record
Technical detail
CVSS v3.0
8.3 · HIGH
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00800 · 56.1th percentile
Published
2019-03-28T17:58Z
EPSS history
Timeline
  • 28 MAR 17:58Z
    DSA-2019-034: Dell EMC Networking OS10 Undocumented Default Cryptographic Key Vulnerability
    cvelistv5