Software for Open Networking in the Cloud (SONiC) Elevation of Privilege Vulnerability
CVE-2024-21418

7.8HIGH

Key Information:

Vendor

Microsoft
Status
Software For Open Networking In The Cloud (sonic)
Vendor
CVE Published:
12 March 2024

What is CVE-2024-21418?

The elevation of privilege vulnerability in Software for Open Networking in the Cloud (SONiC) allows an attacker to gain administrative privileges under certain conditions. This flaw could potentially enable unauthorized entities to manipulate network configurations and access sensitive information, leading to severe implications for network integrity and security. Adequate measures should be taken to mitigate this risk to ensure the safe operation of cloud networking environments.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Software for Open Networking in the Cloud (SONiC) Unknown 1.0.0 < 20220531.26

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.