CVE-2022-34424 Memory corruption in Dell Networking OS10
An attacker can cause a system crash on Dell Networking OS10 devices by running specific security scans, leading to denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-34424?
CVE-2022-34424 is a high-severity memory corruption vulnerability in Dell Networking OS10, published on 28 Sep 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Networking OS10, versions 10.5.1.x, 10.5.2.x, and 10.5.3.x contain a vulnerability that could allow an attacker to cause a system crash by running particular security scans.
Weakness: CWE-787
Which versions are affected by CVE-2022-34424?
It affects 1 product.
Products include Dell Smartfabric Os10.
How do I fix CVE-2022-34424?
No fix has been published for CVE-2022-34424 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-34424 being exploited?
There is no known exploitation of CVE-2022-34424 in the wild and no public exploit code.
Other vulnerabilities in Dell Networking OS10
- CVE-2023-32462 Command injection in Dell SmartFabric OS10
- CVE-2023-28078 Information disclosure in Dell SmartFabric OS10
- CVE-2025-46427 Command injection in SmartFabric OS10 Software
- CVE-2025-46428 Command injection in SmartFabric OS10 Software
- CVE-2024-48013 Privilege escalation in SmartFabric OS10 Software
Sources
Also known as GHSA-62gv-643r-hm7q.