CVE-2025-38741

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication.

Score

CVSS 3.1 7.5 High

Status

Analyzed - security_alert@emc.com

Published

2025-08-04

Last modified

2025-08-05

Weaknesses

CWE-321, CWE-798

Affected products

• Enterprise Sonic Os (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000340083/dsa-2025-275-security-update-for-dell-enterprise-sonic-distribution-…