Dell Networking Switches Enterprise SONiC OS Insertion of Sensitive Information into Log File Vulnerability

A vulnerability allowing the insertion of sensitive information into log files has been identified in Dell Networking Switches running Enterprise SONiC OS, versions prior to 4.4.1 and 4.2.3. This vulnerability could be exploited by a high-privileged attacker with remote access, leading to unauthorized information exposure.

Impact

Exploitation of this vulnerability could result in the unauthorized exposure of sensitive information.

Remediation

Users can update to version 4.4.1 or 4.2.3 or later to address this vulnerability. The Dell Enterprise SONiC Distribution update is available through the Dell Support website.