Known vulnerabilities in Enterprise SONiC - page 4

Vendor: Dell
Software: Enterprise SONiC
Software CPE: cpe:2.3:a:dell:enterprise_sonic:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 105
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Enterprise SONiC Enterprise SONiC is affected by 105 known vulnerabilities: 16 high, 52 medium, 37 low Critical High Medium Low

Vulnerabilities (105)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85623 - Information Exposure Through Timing Discrepancy
CVE-2024-0553		 CWE-208 Medium
No
No
 4.2.1 21.01.2024 SB2024012105
SB2024012106
SB2024012234
and 78 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 4.2.1 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU82079 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-48566		 CWE-362 Medium
No
No
 4.1.2 17.10.2023 SB2023101709
SB2023101713
SB2023101714
and 17 more
#VU81628 - Out-of-bounds read
CVE-2023-4693		 CWE-125 Low
No
No
 4.2.1 05.10.2023 SB2023100511
SB2023100523
SB2023100703
and 26 more
#VU80931 - Resource exhaustion
CVE-2023-3341		 CWE-400 Medium
No
No
 4.2.1 20.09.2023 SB2023092048
SB2023092050
SB2023092148
and 90 more
#VU80564 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-48565		 CWE-611 Medium
Available
No
 4.1.2 08.09.2023 SB2023090833
SB2023090836
SB2023101232
and 24 more
#VU80228 - Cleartext Transmission of Sensitive Information
CVE-2023-40217		 CWE-319 Medium
No
No
 4.1.2 01.09.2023 SB2023090142
SB2023090143
SB2023090144
and 139 more
#VU79586 - Access of Uninitialized Pointer
CVE-2023-36054		 CWE-824 Medium
No
No
 4.2.1 16.08.2023 SB2023081621
SB2023081623
SB2023081624
and 51 more
#VU72618 - Improper input validation
CVE-2023-24329		 CWE-20 Medium
No
No
 4.1.2 28.02.2023 SB2023022819
SB2023022822
SB2023030832
and 158 more
#VU70130 - Heap-based Buffer Overflow
CVE-2022-4141		 CWE-122 Medium
No
No
 4.1.2 13.12.2022 SB2022121301
SB2022121303
SB2022122818
and 15 more
#VU69807 - Off-by-one Error
CVE-2022-3821		 CWE-193 Low
No
No
 4.1.2 01.12.2022 SB2022120139
SB2022120141
SB2022120143
and 50 more
#VU69392 - Resource exhaustion
CVE-2022-45061		 CWE-400 Medium
No
No
 4.1.2 16.11.2022 SB2022111650
SB2022112824
SB2022112856
and 125 more
#VU67760 - Type conversion
CVE-2020-10735		 CWE-704 Medium
No
No
 4.1.2 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107		 CWE-78 High
No
No
 4.1.2 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU61681 - Server-Side Request Forgery (SSRF)
CVE-2021-4189		 CWE-918 Medium
No
No
 4.1.2 29.03.2022 SB2022032904
SB2022032905
SB2022032907
and 42 more
#VU61675 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-0391		 CWE-93 Medium
No
No
 4.1.2 29.03.2022 SB2022032903
SB2022032905
SB2022032907
and 49 more
#VU60098 - Improper input validation
CVE-2021-3426		 CWE-20 Medium
No
No
 4.1.2 27.01.2022 SB2022012753
SB2022032905
SB2022032907
and 34 more
#VU59089 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3737		 CWE-835 Low
No
No
 4.1.2 22.12.2021 SB2021122214
SB2022050235
SB2022051138
and 58 more
#VU58295 - Resource Management Errors
CVE-2021-3733		 CWE-399 Low
No
No
 4.1.2 23.11.2021 SB2021112309
SB2021122214
SB2022050235
and 41 more
#VU28538 - Resource exhaustion
CVE-2020-11080		 CWE-400 Medium
No
No
 4.2.1 03.06.2020 SB2020060305
SB2020060607
SB2020060703
and 42 more


Showing elements 61 - 80 out of 105