CVE-2013-3594

Vulnerability

The SSH service on Dell PowerConnect 3348 version 1.2.1.3, PowerConnect 3524p version 2.0.0.48, and PowerConnect 5324 version 2.0.1.4 contains an improper input validation vulnerability (CWE-20). Sending a large amount of data to TCP port 22 triggers a crash in the SSH daemon, which can cause the switch to reset or potentially lead to arbitrary code execution [1].

Exploitation

An unauthenticated attacker with network access to the switch can exploit this vulnerability by transmitting many packets to the SSH port (TCP 22). No authentication is required, and the attacker does not need prior access to the device. The attack simply involves flooding the SSH service with data [1].

Impact

Successful exploitation causes the switch to crash and reset, resulting in a denial of service (DoS). The vulnerability note indicates that this could also lead to exploitation and execution of arbitrary code, though specific code-execution details are not publicly disclosed [1]. The CVSS score reflects the severity of this bug.

Mitigation

Dell has not released a firmware patch for these affected models as of the last revision date of the vulnerability note (2014-01-17). Users should consider isolating the management interface of affected switches to trusted networks as a workaround. No additional mitigations are publicly documented in the available reference [1].