Advisories · Technology

Dell Enterprise SONiC OS.

Every CVE that names Dell Enterprise SONiC OS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-38741 CVE record

CVSS 7.5 High

Hard-coded cryptographic key in Dell Enterprise SONiC OS
- Dell Enterprise SONiC OS
- Hard-coded credentials
Not analysed yet 4 Aug 2025
CVE-2025-23374 CVE record

CVSS 8.0 High

Sensitive information in log files in Dell Enterprise SONiC OS
- Dell Enterprise SONiC OS
- Information disclosure
Not analysed yet 30 Jan 2025
CVE-2024-45763 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

OS command injection in Dell Enterprise SONiC OS
- Dell Enterprise SONiC OS
- Command injection
Not analysed yet 8 Nov 2024
CVE-2024-45764 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Dell Enterprise SONiC OS: Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x…
- Dell Enterprise SONiC OS
- Authentication bypass
Not analysed yet 8 Nov 2024
CVE-2024-45765 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

OS command injection in Dell Enterprise SONiC OS
- Dell Enterprise SONiC OS
- Command injection
Not analysed yet 8 Nov 2024
CVE-2023-32484 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper input validation in Dell Enterprise SONiC OS
- Dell Enterprise SONiC OS
- CWE-20
Not analysed yet 15 Feb 2024
CVE-2023-24574 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Dell Enterprise SONiC OS
- Dell Enterprise SONiC OS
- Denial of service
Not analysed yet 2 Feb 2023
CVE-2022-34425 CVE record

CVSS 7.5 High

Hard-coded cryptographic key in Dell Enterprise SONiC OS
- Dell Enterprise SONiC OS
- Hard-coded credentials
Not analysed yet 10 Oct 2022
CVE-2021-36309 CVE record

CVSS 7.1 High

Plaintext password storage in Dell Enterprise SONiC OS
- Dell Enterprise SONiC OS
- CWE-256
Not analysed yet 1 Oct 2021