critical9.1
CVE-2023-28078
Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured.
Impact
Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability leading to information disclosure and a possible Denial of Service when a huge number of requests are sent to the switch. This is a high severity vulnerability as it allows an attacker to view sensitive data. Dell recommends customers to upgrade at the earliest opportunity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Smartfabric Os10 | from 10.5.2.0 before 10.5.2.12 from 10.5.3.0 before 10.5.3.8 from 10.5.4.0 before 10.5.4.8 Versions 10.5.5.0, 10.5.5.1, 10.5.5.2 |