VYPR
Unrated severityNVD Advisory· Published Jan 18, 2019· Updated Sep 16, 2024

DSA-2019-001: Dell Networking OS10 Improper Certificate Validation Vulnerability

CVE-2018-15784

Description

Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.

Affected products

2

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.