Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication.
The product uses a hard-coded, unchangeable cryptographic key.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_sonic_distribution | Dell | 4.0.0 (including) | 4.0.0 (including) |
| Enterprise_sonic_distribution | Dell | 4.0.1 (including) | 4.0.1 (including) |