CVE Feed

    Dashboard / CVE / CVE-2023-39248

    CVE-2023-39248

    Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network users. This is a high severity vulnerability as it allows an attacker to cause an outage of network. Dell recommends customers to upgrade at the earliest opportunity.

    Published:Dec 5, 2023
    Last Modified:May 28, 2025
    EPS:Dec 5, 2023
    EPSS Score:0.00135
    CVSS Score:7.5

    Affected Products

    Vendor
    Dell
    Product
    Networking Os10

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-25949 (CVSS 8.8) — Dell OS10 Networking Switches, versions10.5.6.x, 10.5.5.x, 10.5.4.x and 10.5.3.x ,contain an improper authoriz…
    CVE-2021-36319 (CVSS 3.3) — Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A…
    CVE-2021-36310 (CVSS 4.9) — Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consu…
    CVE-2021-36308 (CVSS 5.9) — Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication…
    CVE-2021-36307 (CVSS 8.8) — Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vul…
    CVE-2021-36306 (CVSS 8.1) — Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass v…
    CVE-2018-15778 (CVSS 8.8) — Dell OS10 versions prior to 10.4.2.1 contain a vulnerability caused by lack of proper input validation on the …
    CVE-2018-15784 (CVSS 7.4) — Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does n…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High