CVE-2024-25949

published 2024-06-12

CVE-2024-25949: Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated…

Priority P3 52 high 8.8 CVSS 3.1

AV N AC L PR L UI N S U C H I H A H

Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated attacker could potentially exploit this vulnerability leading to escalation of privileges.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
dell	networking_os10	—	—
dell	networking_os10	>= 10.5.3.0 < 10.5.3.10	10.5.3.10
dell	networking_os10	>= 10.5.4.0 < 10.5.4.11	10.5.4.11
dell	networking_os10	>= 10.5.5.0 < 10.5.5.8	10.5.5.8
dell	smartfabric_os10_software	N/A – 10.5.6.x	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-285