PT-2019-16657 · Dell Emc · Os10

Publicado 2019-03-28 · Atualizado 2022-04-05 · CVE-2019-3710

Positive Technologies (AI Summary)

CVSS v3.1

8.3

Alta

Vetor base

AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC Networking OS10 versions prior to 10.4.3

Description The issue is related to a cryptographic key vulnerability. This vulnerability arises due to an underlying application utilizing undocumented, pre-installed X.509v3 key/certificate pairs. An unauthenticated remote attacker who is aware of the default keys may potentially intercept communications or operate the system with elevated privileges.

Recommendations For Dell EMC Networking OS10 versions prior to 10.4.3, update to version 10.4.3 or later to resolve the issue.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2019-3710

Produtos afetados

Os10

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-3710 · Aviso do Fabricante
• https://dell.com/support/article/SLN316558 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-3710 · Nota de Segurança