critical9.0
CVE-2024-45764
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability.
Impact
Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This is a critical severity vulnerability so Dell recommends customers to upgrade at the earliest opportunity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Enterprise Sonic Distribution | from 4.1.0 before 4.1.6 from 4.2.0 before 4.2.2 |