enterprise sonic distribution vulnerabilities and fixes

Recent CVEs affecting enterprise sonic distribution, with upgrade or downgrade steps. 4 tracked.

Also searched as: enterprisesonicdistribution.

enterprise sonic distribution has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-01-30. Highest priority: CVE-2024-45765 (score 50/100).

• CVE-2025-23374 HIGH 8.0 UPGRADE Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Inser
• CVE-2024-45765 CRITICAL 9.1 UPGRADE Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements u
• CVE-2024-45764 CRITICAL 9.0 UPGRADE Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) a Missing Critical Step in Authentication vulner
• CVE-2024-45763 CRITICAL 9.1 UPGRADE Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements u

FAQ

How do I fix enterprise sonic distribution vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is enterprise sonic distribution being exploited right now?

None of the tracked enterprise sonic distribution CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which enterprise sonic distribution CVE should I patch first?

CVE-2024-45765 currently ranks highest (50/100): Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements u.

RSS feed for enterprise sonic distribution · ← Back to latest CVEs