CVE-2025-23374

—

CVSS 3.1

4.9 medium

EPSS

<1%p27

Published

Jan 30, 2025 (Jan 30, 2025)

Modified

Jun 17, 2026

Description

Dell Networking Switches running Enterprise SONiC OS, version(s) prior to 4.4.1 and 4.2.3, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Vendors: dell
Products: enterprise sonic distribution
Weakness: CWE-532
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.