CVE-2022-34425 — Dell / Enterprise SONiC OS

CVE-2022-34425

Dell / Enterprise SONiC OS PUBLISHED

Description (CNA)

Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication.

Affected (CNA)

Vendor / product	Versions
Dell / Enterprise SONiC OS	affected unspecified before 4.0.2

CWE

CWE-321

References

https://www.dell.com/support/kbdoc/en-us/000203395/dsa-2022-257-dell-emc-enterprise-sonic-security-update-for-ssh-cryptographic-key-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000203395/dsa-2022-257-dell-emc-enterprise-sonic-security-update-for-ssh-cryptographic-key-vulnerability