CVE-2025-23374

Summary

CVE-2025-23374 is a vulnerability affecting Dell Networking Switches running Enterprise SONiC OS. Versions prior to 4.4.1 and 4.2.3 contain an Insertion of Sensitive Information into Log File issue. This vulnerability allows a high privileged attacker with remote access to potentially exploit the flaw, resulting in the exposure of confidential information through the log files. The attacker could insert sensitive data into the log files, making it accessible to unauthorized users, posing a significant security risk. Organizations using these affected versions of Enterprise SONiC OS are advised to upgrade to a secure version as soon as possible to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.