Database/Firmware, BMC & network fabric
Dell SmartFabric OS10 (improper privilege management): A low-privileged local attacker elevates privileges on the switch
CVSS 7.8CVE-2024-49558Firmware, BMC & network fabriccurated
Impact
A low-privileged local attacker elevates privileges on the switch.
Who can reach it
Local low-privilege switch access.
What to do
Upgrade OS10 per DSA-2024-425.
References
Related entries
- Dell SmartFabric OS10 (command injection): A low-privileged local attacker executes commands on the switch OSCVE-2024-49560 · Dell SmartFabric OS10 (command injection)High
- Dell SmartFabric OS10 (incorrect privilege assignment): Local low-privilege attacker escalates privileges on the switchCVE-2024-49561 · Dell SmartFabric OS10 (incorrect privilege assignment)High
- Linux kernel (drivers/net/ethernet/mellanox/mlx5/core): When a DMA mapping fails on the multi-packet transmit path, theCVE-2024-50001 · Linux kernel (drivers/net/ethernet/mellanox/mlx5/core)High
- Linux kernel (drivers/infiniband/hw/bnxt_re): Collecting hardware counters writes doorbell-pacing statistics into aCVE-2024-50158 · Linux kernel (drivers/infiniband/hw/bnxt_re)High
- Linux kernel (drivers/infiniband/hw/bnxt_re): Building the two-level page list for a large RDMA resource assumesCVE-2024-50208 · Linux kernel (drivers/infiniband/hw/bnxt_re)High
- Linux kernel mlx5_core eswitch vport representors / IPsec FS: During driver unload the vport representor private structCVE-2024-57801 · Linux kernel mlx5_core eswitch vport representors / IPsec FSHigh
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.