DSA-2022-239: Dell Networking OS10 Security Update for a SupportAssist Vulnerability
Summary: Dell Networking OS10 remediation is available for SupportAssist that may be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Low
Details
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34394 | Dell OS10 version 10.5.3.4 contains an Improper Certificate Validation vulnerability in SupportAssist under specific conditions. A remote unauthenticated user may potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data that could be leveraged to conduct man-in-the-middle attacks. | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34394 | Dell OS10 version 10.5.3.4 contains an Improper Certificate Validation vulnerability in SupportAssist under specific conditions. A remote unauthenticated user may potentially exploit this vulnerability, leading to unauthorized access to limited switch configuration data that could be leveraged to conduct man-in-the-middle attacks. | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
Affected Products & Remediation
| Product | Affected Version | Updated Version | Link to Update |
| Dell Networking OS10 | 10.5.3.4 | 10.5.3.5 | Link to update |
| The user can also upgrade to 10.5.4.0 |
Note: The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
| Product | Affected Version | Updated Version | Link to Update |
| Dell Networking OS10 | 10.5.3.4 | 10.5.3.5 | Link to update |
| The user can also upgrade to 10.5.4.0 |
Note: The table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Workarounds & Mitigations
A system configuration file can be manually edited through system CLI.
Revision History
| Revision | Date | Description |
| 1.0 | 2022-09-01 | Initial Release |
| 1.1 | 2022-09-06 | Updated DSA ID |
Related Information
Legal Disclaimer
Affected Products
SmartFabric OS10 SoftwareProducts
Product Security InformationArticle Properties
Article Number: 000202974
Article Type: Dell Security Advisory
Last Modified: 06 Sep 2022
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.