CVE-2024-45763

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Nov 8, 2024
Updated: Nov 13, 2024
CWE ID 78

Summary

CVE-2024-45763 is a critical vulnerability affecting Dell Enterprise SONiC OS versions 4.1.x and 4.2.x. An attacker with remote access and high privileges can exploit this OS Command Injection flaw, allowing them to execute arbitrary commands on the system. The vulnerability occurs due to improper neutralization of special elements in OS commands, posing a significant risk. Dell strongly advises customers to upgrade to the latest OS version as soon as possible to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share