Authentication Bypass in Dell Networking OS10 with RESTCONF API

CVE-2021-36306

What is CVE-2021-36306?

Dell Networking OS10, specifically versions released before October 2021, is susceptible to an authentication bypass vulnerability when the RESTCONF API is enabled. This flaw allows remote, unauthenticated attackers to exploit the system, gaining unauthorized access to perform various actions. It is crucial for organizations to review their deployments and implement necessary updates to mitigate this risk and enhance overall network security.

References