Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-24545 State: PUBLISHED Published: 2023-04-12T00:00:00.000Z Last Updated: 2025-02-07T15:50:41.522Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Arista Networks Products: EOS Problem Types: CWE-400 Description: On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malformed packets to the switch. This causes a leak of packet buffers and if enough malformed packets are received, the switch may eventually stop forwarding traffic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/s
c. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/17240-security-advisory-0085
CVE ID: CVE-2023-24546 State: PUBLISHED Published: 2023-06-13T00:00:00 Last Updated: 2025-01-06T15:36:36.113Z Vendors: n/a Products: CloudVision Problem Types: CWE-284 Description: On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry and configuration data within the system than intended. This advisory impacts the Arista CloudVision Portal product when run on-premise. It does not impact CloudVision as-a-Service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/su
. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/17022-security-advisory-0083
CVE ID: CVE-2023-24547 State: PUBLISHED Published: 2023-12-05T23:29:01.375Z Last Updated: 2025-05-28T15:54:35.342Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Arista Networks Products: MOS Problem Types: cwe-212 Description: On affected platforms running Arista MOS, the configuration of a BGP password will cause the password to be logged in clear text that can be revealed in local logs or remote logging servers by authenticated users, as well as appear in clear text in the device’s running config. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisor
Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/18644-security-advisory-0090
CVE ID: CVE-2023-24548 State: PUBLISHED Published: 2023-08-29T16:13:10.451Z Last Updated: 2024-09-30T17:46:19.199Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Arista Networks Products: EOS Problem Types: CWE-120 Description: On affected platforms running Arista EOS with VXLAN configured, malformed or truncated packets received over a VXLAN tunnel and forwarded in hardware can cause egress ports to be unable to forward packets. The device will continue to be susceptible to the issue until remediation is in place. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/s
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.arista.com/en/support/advisories-notices/security-advisory/18043-security-advisory-0089
CVE ID: CVE-2023-24549 State: PUBLISHED Published: 2023-02-14T10:36:25.778Z Last Updated: 2025-03-20T16:10:28.755Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-121 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA A
ility to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24550 State: PUBLISHED Published: 2023-02-14T10:36:26.898Z Last Updated: 2025-03-20T16:03:47.010Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-122 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA AD
lity to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24551 State: PUBLISHED Published: 2023-02-14T10:36:28.028Z Last Updated: 2025-03-20T16:03:21.244Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-122 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to heap-based buffer underflow while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container:
vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24552 State: PUBLISHED Published: 2023-02-14T10:36:29.146Z Last Updated: 2024-08-02T11:03:18.800Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process. Additional Analyst Notes: - CVE Program C
ld allow an attacker to to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24553 State: PUBLISHED Published: 2023-02-14T10:36:30.258Z Last Updated: 2025-03-20T16:00:23.716Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Co
ould allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24554 State: PUBLISHED Published: 2023-02-14T10:36:31.375Z Last Updated: 2025-03-20T15:59:50.025Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Co
CVE ID: CVE-2023-24555 State: PUBLISHED Published: 2023-02-14T10:36:32.550Z Last Updated: 2024-08-02T11:03:19.248Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Co
ould allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24556 State: PUBLISHED Published: 2023-02-14T10:36:33.749Z Last Updated: 2025-03-20T19:52:00.164Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Co
CVE ID: CVE-2023-24557 State: PUBLISHED Published: 2023-02-14T10:36:34.877Z Last Updated: 2025-03-20T19:51:39.469Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Co
CVE ID: CVE-2023-24558 State: PUBLISHED Published: 2023-02-14T10:36:36.036Z Last Updated: 2025-03-20T19:51:04.530Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Co
CVE ID: CVE-2023-24559 State: PUBLISHED Published: 2023-02-14T10:36:37.176Z Last Updated: 2025-03-20T19:50:41.586Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Co
CVE ID: CVE-2023-24560 State: PUBLISHED Published: 2023-02-14T10:36:38.321Z Last Updated: 2025-03-20T19:50:22.066Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-787 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to to execute code in the context of the current process. Additional Analyst Notes: - CVE Program
uld allow an attacker to to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24561 State: PUBLISHED Published: 2023-02-14T10:36:39.446Z Last Updated: 2025-03-20T19:49:55.961Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-824 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container
s vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24562 State: PUBLISHED Published: 2023-02-14T10:36:40.716Z Last Updated: 2025-03-20T19:49:22.080Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-824 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container
CVE ID: CVE-2023-24563 State: PUBLISHED Published: 2023-02-14T10:36:41.883Z Last Updated: 2025-03-20T19:49:01.590Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-824 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container
CVE ID: CVE-2023-24564 State: PUBLISHED Published: 2023-02-14T10:36:43.008Z Last Updated: 2025-03-20T18:54:17.185Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-119 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains a memory corruption vulnerability while parsing specially crafted DWG files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19069) Additional Analyst
This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19069) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24565 State: PUBLISHED Published: 2023-02-14T10:36:44.102Z Last Updated: 2025-03-20T18:51:47.868Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-125 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted STL file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19428) A
cially crafted STL file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19428) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24566 State: PUBLISHED Published: 2023-02-14T10:36:45.233Z Last Updated: 2025-03-20T15:06:08.431Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: Solid Edge SE2022, Solid Edge SE2023 Problem Types: CWE-121 Description: A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223.0Update2). The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19472) Additional
cker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19472) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-491245.pdf
CVE ID: CVE-2023-24567 State: PUBLISHED Published: 2023-03-01T14:22:55.088Z Last Updated: 2025-03-07T18:56:17.329Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell NetWorker, NVE Problem Types: CWE-200 Description: Dell NetWorker versions 19.5 and earlier contain 'RabbitMQ' version disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and may launch target-specific attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000210471/dsa-2023-058-dell-networker-security-update-for-vers
t: References: - https://www.dell.com/support/kbdoc/en-us/000210471/dsa-2023-058-dell-networker-security-update-for-version-disclosure-vulnerability
CVE ID: CVE-2023-24568 State: PUBLISHED Published: 2023-05-30T15:12:19.571Z Last Updated: 2025-01-10T18:57:10.439Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vendors: Dell Products: NetWorker Problem Types: CWE-297 Description: Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000210963/dsa-2023-059-dell-networker-security-update-for-a-rabbitmq-vulnerability-related-to-improper-validation-of-hostname-in-rabbitmq-startup
ll-networker-security-update-for-a-rabbitmq-vulnerability-related-to-improper-validation-of-hostname-in-rabbitmq-startup-script-which-fails-to-replace-ca-signed-certificates
CVE ID: CVE-2023-24569 State: PUBLISHED Published: 2023-02-10T12:57:07.328Z Last Updated: 2025-03-24T18:37:34.881Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Alienware Command Center (AWCC) Problem Types: CWE-20 Description: Dell Alienware Command Center versions 5.5.37.0 and prior contain an Improper Input validation vulnerability. A local authenticated malicious user could potentially send malicious input to a named pipe in order to elevate privileges on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000208327/dsa-2023-044
CVE ID: CVE-2023-24571 State: PUBLISHED Published: 2023-03-16T09:55:59.328Z Last Updated: 2025-02-26T18:59:02.354Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: Embedded Box PC 3000 , CPG BIOS Problem Types: CWE-20 Description: Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with administrator privileges could potentially exploit this vulnerability to perform arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000210955/dsa-2023-046
CVE ID: CVE-2023-24572 State: PUBLISHED Published: 2023-02-13T07:15:32.560Z Last Updated: 2025-03-21T14:51:11.625Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Dell Command Integration Suite for System Center (DCIS) Problem Types: CWE-1386 Description: Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-u
l Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000207931/dsa-2023-032
CVE ID: CVE-2023-24573 State: PUBLISHED Published: 2023-02-10T12:30:41.698Z Last Updated: 2025-03-24T18:37:04.298Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Dell Command Monitor (DCM) Problem Types: CWE-264 Description: Dell Command | Monitor versions prior to 10.9 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000207973/dsa-2023-033
CVE ID: CVE-2023-24574 State: PUBLISHED Published: 2023-02-02T16:04:58.071Z Last Updated: 2025-03-27T13:26:26.696Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Enterprise SONiC OS Problem Types: CWE-400 Description: Dell Enterprise SONiC OS, 3.5.3, 4.0.0, 4.0.1, 4.0.2, contains an "Uncontrolled Resource Consumption vulnerability" in authentication component. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to uncontrolled resource consumption by creating permanent home directories for unauthenticated users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
unauthenticated users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000208165/dsa-2023-039-dell-emc-enterprise-sonic-security-update-for-an-uncontrolled-resource-consumption-vulnerability