CVE-2022-34394

Vulnerability

Dell Networking OS10 version 10.5.3.4 contains an Improper Certificate Validation vulnerability in the SupportAssist component [1]. Under specific conditions, the certificate validation logic is flawed, allowing a remote attacker to bypass certificate checks without authentication [1].

Exploitation

A remote unauthenticated attacker with network access to the affected switch can exploit this vulnerability by performing a man-in-the-middle attack against the SupportAssist communication channel [1]. The attacker does not require any user interaction or prior authentication [1]. The complexity of the attack is considered high (AC:H), as specific conditions must be met for the certificate validation to fail [1].

Impact

Successful exploitation leads to unauthorized access to limited switch configuration data [1]. The attacker can conduct man-in-the-middle attacks to gain access to SupportAssist information, resulting in a low confidentiality impact (C:L) while integrity and availability remain unaffected [1].

Mitigation

Dell Technologies has released OS10 version 10.5.3.5 as the fixed version containing the proper certificate validation fix [1]. Users can also upgrade to version 10.5.4.0 [1]. No workaround is available; updating to the patched version is the recommended mitigation.