CVE-2023-32484: Input Validation
Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32484?
CVE-2023-32484 is rated as Critical due to its potential for remote unauthenticated privilege escalation.
How do I fix CVE-2023-32484?
To fix CVE-2023-32484, upgrade affected Dell Networking Switches and Enterprise SONiC versions to the latest patched versions.
What systems are affected by CVE-2023-32484?
CVE-2023-32484 affects Dell Networking Switches running Enterprise SONiC versions up to 4.1.0 and certain versions of Enterprise SONiC below 4.0.6.
What could happen if CVE-2023-32484 is exploited?
If exploited, CVE-2023-32484 could allow a remote attacker to gain administrative access to affected systems.
Is there a workaround for CVE-2023-32484?
Currently, no specific workaround is provided for CVE-2023-32484; the recommended action is to apply the necessary updates.