Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication.
The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_sonic_distribution | Dell | 4.0.0 (including) | 4.0.0 (including) |
| Enterprise_sonic_distribution | Dell | 4.0.1 (including) | 4.0.1 (including) |