CVE-2013-3594: Input Validation

Published Jan 20, 2014

Updated

The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device reset) or possibly execute arbitrary code by sending many packets to TCP port 22.

Affected Software

3 affected components

Dell PowerConnect 3348=1.2.1.3

Dell Powerconnect 3524p=2.0.0.48

Dell Powerconnect 5324=2.0.1.4

Event History

Jan 20, 2014

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-3594?

CVE-2013-3594 is classified as a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.

How do I fix CVE-2013-3594?

To fix CVE-2013-3594, update the affected Dell PowerConnect switch firmware to the latest version available from Dell.

What devices are affected by CVE-2013-3594?

CVE-2013-3594 affects Dell PowerConnect 3348 (version 1.2.1.3), 3524P (version 2.0.0.48), and 5324 (version 2.0.1.4) switches.

What type of attack can exploit CVE-2013-3594?

CVE-2013-3594 can be exploited by remote attackers to launch denial of service attacks or potentially execute arbitrary code.

Is CVE-2013-3594 being actively exploited?

While there is no specific information on active exploitation of CVE-2013-3594, it is advisable to mitigate the risk as it has a significant impact potential.