Dell OS10 Switches Vulnerability: Information Disclosure and Denial of Service Threats

CVE-2023-28078

What is CVE-2023-28078?

A vulnerability exists in Dell OS10 Networking Switches, specifically in versions 10.5.2.x and above, related to the zeroMQ messaging library when Virtual Link Trunking (VLT) is configured. This vulnerability allows remote unauthenticated attackers to exploit the system under certain conditions. By sending a large number of requests to the switch, attackers can potentially access sensitive information and might induce a Denial of Service, compromising the functionality of the network device. Dell has advised users to upgrade their systems promptly to mitigate this risk.

References