CVE-2023-24574: Dell Enterprise Sonic Distribution

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication component. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to uncontrolled resource consumption by creating permanent home directories for unauthenticated users.

Affected products

• Dell Enterprise Sonic Distribution: from 3.5.3, before 4.0.3 (fixed in 4.0.3)

Published 2023-02-02. Last modified 2026-06-17.