DSA-2022-257: Dell Enterprise SONiC Security Update for SSH Cryptographic Key Vulnerability.
Samenvatting: Dell Enterprise SONiC remediation is available for an SSH cryptographic key vulnerability that may be exploited by malicious users to compromise the affected system.
Dit artikel is van toepassing op
Dit artikel is niet van toepassing op
Dit artikel is niet gebonden aan een specifiek product.
Niet alle productversies worden in dit artikel vermeld.
Impact
High
Gegevens
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-344225 | Dell Enterprise SONiC operating system 4.0.0 and 4.0.1 contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker may potentially exploit this vulnerability, leading to unauthorized access to communication. | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-344225 | Dell Enterprise SONiC operating system 4.0.0 and 4.0.1 contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker may potentially exploit this vulnerability, leading to unauthorized access to communication. | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Getroffen producten en herstel
| Product | Affected Versions | Updated Version | Link to Update |
| Dell Enterprise SONiC Distribution | Versions 4.0.0 and 4.0.1 | 4.0.2 | Link to update |
| Product | Affected Versions | Updated Version | Link to Update |
| Dell Enterprise SONiC Distribution | Versions 4.0.0 and 4.0.1 | 4.0.2 | Link to update |
Tijdelijke oplossingen en risicobeperking
Delete installed SSH keys and restart SSHD service.
Revisiegeschiedenis
| Revision | Date | Description |
| 1.0 | 2022-09-15 | Initial Release |
Verwante informatie
Juridische verklaring van afstand
Producten
Product Security InformationArtikeleigenschappen
Artikelnummer: 000203395
Artikeltype: Dell Security Advisory
Laatst aangepast: 19 sep. 2025
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.