CVE-2023-32484CWE-20

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability

Critical · published February 15, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
46.7
In the wild
Unconfirmed
What it is

🚨 An unauthenticated user can leap straight into the highest administrative role on your Dell Networking Switch with just a sneaky input! 🔥 Think of it like a hotel where anyone can stroll in without checking in just by claiming a spare key left in a flower pot. Once inside, they can access the master suite and control everything without any security checks! This vulnerability is absolutely devastating; an attacker could gain full control over your network switches, allowing them to manipulate configurations, intercept traffic, or even bring your entire network down. The possibilities for chaos are endless!

Put simply

Think of it like a hotel where anyone can stroll in without checking in just by claiming a spare key left in a flower pot. Once inside, they can access the master suite and control everything without any security checks! This improper input validation flaw in Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4, and below allows a remote unauthenticated attacker to escalate privileges to the highest administrative level by exploiting the vulnerability.

What to do

This vulnerability is absolutely devastating; an attacker could gain full control over your network switches, allowing them to manipulate configurations, intercept traffic, or even bring your entire network down. The possibilities for chaos are endless! Upgrade your Dell Networking Switches to the latest recommended version as soon as possible to patch this vulnerability. Act quickly to avoid any potential exploitation and ensure your network remains secure! You've got this! Follow these steps, and you'll be the hero of your network! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00575 · 46.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-02-15T12:49Z
EPSS history
Timeline
  • 15 FEB 12:49Z
    Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability
    cvelistv5