Dell Enterprise Sonic Distribution vulnerabilities

7 CVEs affecting Dell Enterprise Sonic Distribution, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-23374, published 2025-01-30.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-45763, published 2024-11-08. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker…
• CVE-2024-45765, published 2024-11-08. High severity, CVSS 7.2. EPSS: 1.4% chance of exploitation in the next 30 days. Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker…
• CVE-2022-34425, published 2022-10-10. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized…
• CVE-2023-24574, published 2023-02-02. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication component. An unauthenticated remote attacker could potentially…
• CVE-2023-32484, published 2024-02-15. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this…
• CVE-2024-45764, published 2024-11-08. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this…
• CVE-2025-23374, published 2025-01-30. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker…