Rewterz
Rewterz Threat Advisory – Multiple Dell EMC PowerScale OneFS Vulnerabilities
February 6, 2023
Rewterz
Rewterz Threat Alert – Black Basta Ransomware – Active IOCs
February 6, 2023

Rewterz Threat Advisory – CVE-2023-24574 – Dell Enterprise SONiC OS Vulnerability

Severity

Medium

Analysis Summary

CVE-2023-24574

Dell Enterprise SONiC OS is vulnerable to a denial of service, caused by an uncontrolled resource consumption vulnerability in the authentication component. An attacker could exploit this vulnerability to consume all available resources.

Impact

  • Denial of Service

Indicators Of Compromise

CVE

  • CVE-2023-24574

Affected Vendors

Dell

Affected Products

  • Dell Enterprise SONiC OS 5.3
  • Dell Enterprise SONiC OS 3.5.4
  • Dell Enterprise SONiC OS 4.0.0
  • Dell Enterprise SONiC OS 4.0.1
  • Dell Enterprise SONiC OS 4.0.2

Remediation

Refer to Dell Security Advisory for patch, upgrade or suggested workaround information.

Dell Security Advisory