Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products

DSA-2024-377: Security Update for Dell Networking OS10 Vulnerability

Summary: Dell Networking OS10 remediation is available for a security vulnerability that could be exploited by malicious users to compromise the affected system.

This article applies to   This article does not apply to 

Impact

High

Details

Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-39585 Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an Use of Hard-coded Password vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-side request forgery and Information disclosure.
 
7.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Proprietary Code CVEs Description CVSS Base Score CVSS Vector String
CVE-2024-39585 Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an Use of Hard-coded Password vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-side request forgery and Information disclosure.
 
7.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products & Remediation

Product Affected Versions Remediated Versions Link
Dell Networking OS10 10.5.6.x 10.5.6.4 SmartFabric OS10 downloads page
Dell Networking OS10 10.5.5.4 through 10.5.5.10 10.5.5.11 SmartFabric OS10 downloads page
Product Affected Versions Remediated Versions Link
Dell Networking OS10 10.5.6.x 10.5.6.4 SmartFabric OS10 downloads page
Dell Networking OS10 10.5.5.4 through 10.5.5.10 10.5.5.11 SmartFabric OS10 downloads page
  • SmartFabric OS10 downloads are also available from your Dell Digital Locker.
  • The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

Revision History

RevisionDateDescription
1.02024-09-05Initial Release

Acknowledgements

Dell would like to thank n3k From TIANGONG Team of Legendsec at QI-ANXIN Group for reporting this issue.

Related Information

Affected Products

SmartFabric OS10 Software