CVE-2022-29089: Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote…

PriorityP425medium4.9CVSS 3.1

AVNACLPRHUINSUCHINAN

EPSS

0.49%

38.3th percentile

Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and access the REST API with admin privileges.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
dell	dell_networking_os10	>= unspecified < 10.5.3.5	10.5.3.5
dell	smartfabric_os10	>= 10.5.1.0 < 10.5.1.11	10.5.1.11
dell	smartfabric_os10	>= 10.5.2.0 < 10.5.2.11	10.5.2.11
dell	smartfabric_os10	>= 10.5.3.0 < 10.5.3.5	10.5.3.5

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.