N/A - CVE-2023-32484

Executive Summary

Informations
Name	CVE-2023-32484	First vendor Publication	2024-02-15
Vendor	Cve	Last vendor Modification	2024-02-15

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score	N/A	Attack Range	N/A
Cvss Impact Score	N/A	Attack Complexity	N/A
Cvss Expoit Score	N/A	Authentication	N/A
Calculate full CVSS 2.0 Vectors scores

Detail

Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability and escalate privileges up to the highest administrative level. This is a Critical vulnerability affecting certain protocols, Dell recommends customers to upgrade at the earliest opportunity.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32484

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-20	Improper Input Validation

OpenVAS Exploits

Date	Description
2010-04-21	Name : FreeBSD Ports: curl File : nvt/freebsd_curl3.nasl
2010-04-06	Name : Debian Security Advisory DSA 2023-1 (curl) File : nvt/deb_2023_1.nasl

Nessus® Vulnerability Scanner

Date	Description
2010-04-20	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_c8c31c4149ed11df83fb0015587e2cc1.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2023.nasl - Type : ACT_GATHER_INFO