What is CVE-2018-15784?

CVE-2018-15784 is a high-severity vulnerability in Dell Networking Os10, classified under Improper Certificate Validation. CVSS score: 7.4/10. Published 2019-01-18.

How severe is CVE-2018-15784?

High severity. CVSS v3 base score is 7.4 out of 10.

Vulnerability in Dell Networking Os10

CVE-2018-15784

Dell Networking OS10 versions prior to 10.4.3.0 contain a vulnerability in the Phone Home feature which does not properly validate the server's certificate authority during TLS handshake. Use of an invalid or malicious certificate could potentially allow an attacker to spoof a trusted entity by using a man-in-the-middle (MITM) attack.

Vulnerability class: Improper Certificate Validation

EPSS: 0.006 (45.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Dell Networking Os10 — versions unspecified
Dell Networking_os10

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

security_alert@emc.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2018-15784?: CVE-2018-15784 is a high-severity vulnerability in Dell Networking Os10, classified under Improper Certificate Validation. CVSS score: 7.4/10. Published 2019-01-18.
How severe is CVE-2018-15784?: High severity. CVSS v3 base score is 7.4 out of 10.