Vulnerability · Published Dec 5, 2023 · Assigned by dell
CVE-2023-39248
High 7.5
In plain English
A high-severity uncontrolled resource consumption in Dell Networking OS10 from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Official description
Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network users. This is a high severity vulnerability as it allows an attacker to cause an outage of network. Dell recommends customers to upgrade at the earliest opportunity.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dell Networking OS10 | 10.5.5.5 |
Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H