CVE-2023-39248
CVSS V2 None
CVSS V3 None
Description
Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network users. This is a high severity vulnerability as it allows an attacker to cause an outage of network. Dell recommends customers to upgrade at the earliest opportunity.
Overview
- CVE ID
- CVE-2023-39248
- Assigner
- dell
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-12-05T06:04:01.008Z
- Last Modified Date
- 2023-12-05T06:04:01.008Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000220138/dsa-2023-278-dell-networking-os10-security-updates-for-uncontrolled-resource-consumption | vendor-advisory |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-39248 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39248 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-06-25 18:45:51 | Added to TrackCVE |