CVE-2023-28078

Published: Feb 15, 2024Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could potentially exploit this vulnerability leading to information disclosure and a possible Denial of Service when a huge number of requests are sent to the switch. This is a high severity vulnerability as it allows an attacker to view sensitive data. Dell recommends customers to upgrade at the earliest opportunity.

Affected (7)

Products: Dell: Smartfabric Os10

Dell

1 product

Smartfabric Os10

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Dell Smartfabric Os10	From 10.5.2.0 to 10.5.2.12
Dell Smartfabric Os10	From 10.5.3.0 to 10.5.3.8
Dell Smartfabric Os10	From 10.5.4.0 to 10.5.4.8
Dell Smartfabric Os10	Version 10.5.5.0
Dell Smartfabric Os10	Version 10.5.5.1
Dell Smartfabric Os10	Version 10.5.5.2
Dell Smartfabric Os10	Version 10.5.5.3

Related CWEs

CWE-923

Improper Restriction of Communication Channel to Intended Endpoints

The product establishes a communication channel to (or from) an endpoint for privileged or protected operations, but it does not properly ensure that it is communicating with the correct endpoint.

References (2)

https://www.dell.com/support/kbdoc/en-us/000216584/dsa-2023-124-security-update-for-dell-smartfabric-os10-multiple-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000216584/dsa-2023-124-security-update-for-dell-smartfabric-os10-multiple-vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.