CVE-2025-23374

4.9 mediumEPSS 0.3%

Medium (4.9) in dell enterprise sonic distribution. EPSS 0.3% chance of exploitation in the next 30 days.

Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Severity

CVSS 3.1

4.9 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE: CWE-532
Published: 2025-01-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:enterprise_sonic_distribution

References

https://www.dell.com/support/kbdoc/en-us/000278568/dsa-2025-057-security-update-for-dell-enterprise-sonic-distribution-vulnerability

Check your stack JSON