CVE-2024-45765: Dell Enterprise Sonic Distribution

High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days.

Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This is a critical severity vulnerability as it allows high privilege OS commands to be executed with a less privileged role; so Dell recommends customers to upgrade at the earliest opportunity.

Affected products

• Dell Enterprise Sonic Distribution: from 4.1.0, before 4.1.6 (fixed in 4.1.6); from 4.2.0, before 4.2.2 (fixed in 4.2.2)

Published 2024-11-08. Last modified 2026-06-17.