CVE-2023-24574 — Dell / Enterprise SONiC OS

Description (CNA)

Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication component. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to uncontrolled resource consumption by creating permanent home directories for unauthenticated users.

Affected (CNA)

Vendor / product	Versions
Dell / Enterprise SONiC OS	affected 0 through 3.5.3, 3.5.4, 4.0.0, 4.0.1, 4.0.2

CWE

CWE-400

References

https://www.dell.com/support/kbdoc/en-us/000208165/dsa-2023-039-dell-emc-enterprise-sonic-security-update-for-an-uncontrolled-resource-consumption-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000208165/dsa-2023-039-dell-emc-enterprise-sonic-security-update-for-an-uncontrolled-resource-consumption-vulnerability

CISA-ADP

No English description supplied.

No references supplied.