Known vulnerabilities in Dell Enterprise SONiC Distribution - page 2

Known vulnerabilities in Dell Enterprise SONiC Distribution - page 2

Vendor: Dell

Software: Dell Enterprise SONiC Distribution

Software CPE: cpe:2.3:a:dell:dell_enterprise_sonic_distribution:*:*:*:*:*:*:*:*

Website: https://www.delltechnologies.com/en-us/index.htm

Total vulnerabilities: 37

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (37)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU100516 - Improper input validation CVE-2024-11168	CWE-20	Medium	No	No	4.4.2	15.11.2024	SB2024111507 SB2024111526 SB2024111527 and 76 more
#VU99357 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2024-9287	CWE-78	Low	No	No	4.4.2	28.10.2024	SB2024102836 SB2024102838 SB20241101111 and 117 more
#VU96945 - Resource exhaustion CVE-2024-7592	CWE-400	Medium	No	No	4.4.2	09.09.2024	SB2024090916 SB2024090917 SB2024090918 and 72 more
#VU96745 - Incorrect Regular Expression CVE-2024-6232	CWE-185	Medium	No	No	4.4.2	03.09.2024	SB2024090377 SB2024090927 SB2024091048 and 145 more
#VU96596 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-8088	CWE-835	Medium	No	No	4.4.2	28.08.2024	SB2024082860 SB2024082861 SB2024082862 and 82 more
#VU95571 - Command injection CVE-2024-6923	CWE-77	Medium	No	No	4.4.2	08.08.2024	SB2024080861 SB2024080862 SB2024080863 and 144 more
#VU95157 - Incorrect Provision of Specified Functionality CVE-2024-4032	CWE-684	Medium	No	No	4.4.2	02.08.2024	SB2024080203 SB2024080207 SB2024080209 and 101 more
#VU87685 - Resource exhaustion CVE-2024-0450	CWE-400	Medium	No	No	4.4.2	21.03.2024	SB2024032107 SB2024032110 SB2024040848 and 80 more
#VU87185 - UNIX Symbolic Link (Symlink) Following CVE-2023-6597	CWE-61	Low	No	No	4.4.2	07.03.2024	SB2024030718 SB2024030726 SB2024030727 and 88 more
#VU82980 - Improper input validation CVE-2023-27043	CWE-20	Medium	No	No	4.4.2	10.11.2023	SB2023041957 SB2023111064 SB2023111315 and 120 more
#VU80228 - Cleartext Transmission of Sensitive Information CVE-2023-40217	CWE-319	Medium	No	No	4.4.2	01.09.2023	SB2023090142 SB2023090143 SB2023090144 and 139 more
#VU72618 - Improper input validation CVE-2023-24329	CWE-20	Medium	No	No	4.4.2	28.02.2023	SB2023022819 SB2023022822 SB2023030832 and 158 more
#VU69392 - Resource exhaustion CVE-2022-45061	CWE-400	Medium	No	No	4.4.2	16.11.2022	SB2022111650 SB2022112824 SB2022112856 and 125 more
#VU69391 - Deserialization of Untrusted Data CVE-2022-42919	CWE-502	Low	No	No	4.4.2	16.11.2022	SB2022111649 SB2022111655 SB2022111656 and 35 more
#VU68606 - Improper Verification of Cryptographic Signature CVE-2020-16156	CWE-347	High	No	No	4.4.2	24.10.2022	SB2021121359 SB2022102433 SB2022102701 and 12 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2021-28861	CWE-601	Low	No	No	4.4.2	22.09.2022	SB2022092243 SB2022092244 SB2022093032 and 76 more
#VU55056 - Improper input validation CVE-2021-29921	CWE-20	High	No	No	4.4.2	20.07.2021	SB2021072055 SB2022012735 SB2022042261 and 15 more

Showing elements 21 - 40 out of 37