CVE-2023-32484: Dell Enterprise Sonic Distribution

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.

Affected products

• Dell Enterprise Sonic Distribution: from 3.5.0, before 3.5.5 (fixed in 3.5.5); from 4.0.0, before 4.0.6 (fixed in 4.0.6); version 4.1.0 only

Published 2024-02-15. Last modified 2026-06-17.