CVE-2025-38741: Dell Enterprise Sonic OS

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication.

Affected products

• Dell Enterprise Sonic OS: version 4.5.0 only

Published 2025-08-04. Last modified 2026-06-17.