Sensitive Information Disclosure in Dell Enterprise SONiC OS

CVE-2021-36309

What is CVE-2021-36309?

Dell Enterprise SONiC OS, up to version 3.3.0, is affected by a vulnerability that allows an authenticated attacker to access sensitive information. The vulnerability arises from stored TACACS/RADIUS credentials, enabling potential misuse of these credentials to conduct further attacks on the system. Organizations utilizing Dell Enterprise SONiC should ensure they are using an updated version to mitigate this risk.

References