CVE-2025-23374 — Dell / Enterprise SONiC OS

CVE-2025-23374

Dell / Enterprise SONiC OS PUBLISHED

Description (CNA)

Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Affected (CNA)

Vendor / product	Versions
Dell / Enterprise SONiC OS	affected N/A before 4.4.1; affected N/A before 4.2.3

CWE

CWE-532

References

https://www.dell.com/support/kbdoc/en-us/000278568/dsa-2025-057-security-update-for-dell-enterprise-sonic-distribution-vulnerability

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.