Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network users. This is a high severity vulnerability as it allows an attacker to cause an outage of network. Dell recommends customers to upgrade at the earliest opportunity.
References
Configurations
History
21 Nov 2024, 08:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.dell.com/support/kbdoc/en-us/000220138/dsa-2023-278-dell-networking-os10-security-updates-for-uncontrolled-resource-consumption - Vendor Advisory |
11 Dec 2023, 15:33
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:dell:networking_os10:10.5.5.5:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Dell networking Os10
Dell |
|
| References | () https://www.dell.com/support/kbdoc/en-us/000220138/dsa-2023-278-dell-networking-os10-security-updates-for-uncontrolled-resource-consumption - Vendor Advisory | |
| CWE | NVD-CWE-noinfo |
05 Dec 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-05 06:15
Updated : 2024-11-21 08:14
NVD link : CVE-2023-39248
Mitre link : CVE-2023-39248
CVE.ORG link : CVE-2023-39248
JSON object : View
Products Affected
dell
- networking_os10
CWE