ID
VAR-202209-1911
CVE
CVE-2022-34394
TITLE
Dell's smartfabric os10 Certificate validation vulnerabilities in
Trust: 0.8
DESCRIPTION
Dell OS10, version 10.5.3.4, contains an Improper Certificate Validation vulnerability in Support Assist. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data. The vulnerability could be leveraged by attackers to conduct man-in-the-middle attacks to gain access to the Support Assist information. Dell's smartfabric os10 Exists in a certificate validation vulnerability.Information may be obtained. Dell SmartFabric OS10 is a Linux-based network switch operating system developed by Dell. Dell SmartFabric OS10 versions prior to 1010.5.1.11 have a security vulnerability
Trust: 1.71
AFFECTED PRODUCTS
| vendor: | dell | model: | smartfabric os10 | scope: | eq | version: | 10.5.3.4 | Trust: 1.0 |
| vendor: | デル | model: | smartfabric os10 | scope: | eq | version: | 10.5.3.4 | Trust: 0.8 |
| vendor: | デル | model: | smartfabric os10 | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | デル | model: | smartfabric os10 | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-295 | Trust: 1.1 |
| problemtype: | Illegal certificate verification (CWE-295) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
trust management problem
Trust: 0.6
PATCH
| title: | Dell SmartFabric OS10 Repair measures for trust management problem vulnerabilities | url: | http://123.124.177.30/web/xxk/bdxqById.tag?id=209701 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2022-34394 | Trust: 3.3 |
| db: | JVNDB | id: | JVNDB-2022-018119 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202209-2908 | Trust: 0.7 |
| db: | CNVD | id: | CNVD-2022-69150 | Trust: 0.1 |
| db: | VULHUB | id: | VHN-426710 | Trust: 0.1 |
REFERENCES
| url: | https://www.dell.com/support/kbdoc/en-us/000202974/dsa-2022-293-dell-networking-os10-security-update-for-a-support-assist-vulnerability | Trust: 2.5 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2022-34394 | Trust: 0.8 |
| url: | https://cxsecurity.com/cveshow/cve-2022-34394/ | Trust: 0.6 |
SOURCES
| db: | VULHUB | id: | VHN-426710 |
| db: | JVNDB | id: | JVNDB-2022-018119 |
| db: | CNNVD | id: | CNNVD-202209-2908 |
| db: | NVD | id: | CVE-2022-34394 |
LAST UPDATE DATE
2024-08-14T15:32:31.536000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-426710 | date: | 2022-09-30T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-018119 | date: | 2023-10-18T08:11:00 |
| db: | CNNVD | id: | CNNVD-202209-2908 | date: | 2022-10-08T00:00:00 |
| db: | NVD | id: | CVE-2022-34394 | date: | 2022-09-30T17:20:10.670 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-426710 | date: | 2022-09-28T00:00:00 |
| db: | JVNDB | id: | JVNDB-2022-018119 | date: | 2023-10-18T00:00:00 |
| db: | CNNVD | id: | CNNVD-202209-2908 | date: | 2022-09-28T00:00:00 |
| db: | NVD | id: | CVE-2022-34394 | date: | 2022-09-28T21:15:12.897 |