Vulnerability · Published Sep 28, 2022 · Assigned by dell
CVE-2022-34394
Low 3.7
In plain English
A low-severity improper certificate validation in Dell Networking OS10 from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Official description
Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by attackers to conduct man-in-the-middle attacks to gain access to the Support Assist information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dell Networking OS10 | unspecified – before 10.5.4.0 |
Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N