CVE-2023-32484: Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote…

PriorityP264critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

0.57%

43.1th percentile

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
dell	enterprise_sonic_distribution	—	—
dell	enterprise_sonic_distribution	>= 3.5.0 < 3.5.5	3.5.5
dell	enterprise_sonic_distribution	>= 4.0.0 < 4.0.6	4.0.6
dell	enterprise_sonic_os	—	—
dell	enterprise_sonic_os	—	—
dell	enterprise_sonic_os	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.