Dell Enterprise SONiC OS SSH Cryptographic Key Vulnerability Allowing Unauthorized Access

A cryptographic key vulnerability in SSH has been identified in Dell Enterprise SONiC OS version 4.5.0. This vulnerability allows an unauthenticated remote attacker to potentially exploit the issue, leading to unauthorized access to communications.

Impact

Exploitation of this vulnerability could result in unauthorized access to communications by an unauthenticated remote attacker.

Remediation

Users can upgrade to Dell Enterprise SONiC OS version 4.5.0a for full remediation. Alternatively, users who wish to remain on version 4.5.0 can run specific CLI commands to regenerate new key pairs for the SSH server.