« Volver al listado

CVE-2024-25949

Estado: ModificadaAlta (8.8)—

Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated attacker could potentially exploit this vulnerability leading to escalation of privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Dell — Networking Os10

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-25949",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-25949",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-06-12T14:40:16.422762Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security_alert@emc.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "SmartFabric OS10 Software",
          "versions": [
            {
              "status": "affected",
              "version": "N/A",
              "versionType": "semver",
              "lessThanOrEqual": "10.5.6.x"
            },
            {
              "status": "affected",
              "version": "N/A",
              "versionType": "semver",
              "lessThanOrEqual": "10.5.5.x"
            },
            {
              "status": "affected",
              "version": "N/A",
              "versionType": "semver",
              "lessThanOrEqual": "10.5.4.x"
            },
            {
              "status": "affected",
              "version": "N/A",
              "versionType": "semver",
              "lessThanOrEqual": "10.5.3.x"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*"
          ],
          "vendor": "dell",
          "product": "smartfabric_os10",
          "versions": [
            {
              "status": "affected",
              "version": "10.5.6.0",
              "lessThan": "10.5.6.1",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "10.5.5.0",
              "lessThan": "10.5.5.8",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "10.5.4.0",
              "lessThan": "10.5.4.11",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "10.5.3.0",
              "lessThan": "10.5.3.10",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-06-12T13:15:49.977",
  "references": [
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000225922/dsa-2024-087-security-update-for-dell-networking-os10-vulnerability",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000225922/dsa-2024-087-security-update-for-dell-networking-os10-vulnerability",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security_alert@emc.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-285"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authorization vulnerability. A remote authenticated attacker could potentially exploit this vulnerability leading to escalation of privileges."
    },
    {
      "lang": "es",
      "value": "Dell OS10 Networking Switches, versiones 10.5.6.x, 10.5.5.x, 10.5.4.x y 10.5.3.x, contienen una vulnerabilidad de autorización incorrecta. Un atacante autenticado remotamente podría explotar esta vulnerabilidad y provocar una escalada de privilegios."
    }
  ],
  "lastModified": "2026-06-17T07:16:47.083",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:networking_os10:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91888D0E-835E-4243-B185-946E52FFFB12",
              "versionEndExcluding": "10.5.3.10",
              "versionStartIncluding": "10.5.3.0"
            },
            {
              "criteria": "cpe:2.3:o:dell:networking_os10:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36A70FD6-8934-4B8F-9482-5001A4EB46F8",
              "versionEndExcluding": "10.5.4.11",
              "versionStartIncluding": "10.5.4.0"
            },
            {
              "criteria": "cpe:2.3:o:dell:networking_os10:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BAC1BA4-1C45-4602-8EDC-4AB561190E60",
              "versionEndExcluding": "10.5.5.8",
              "versionStartIncluding": "10.5.5.0"
            },
            {
              "criteria": "cpe:2.3:o:dell:networking_os10:10.5.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5CC42A8-A9F2-4ECA-A83B-289D5BA9E1E4"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}