CVE-2024-45765

Name of the Vulnerable Software and Affected Versions: Dell Enterprise SONiC OS versions 4.1.x through 4.2.x

Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This allows a high privileged attacker with remote access to potentially execute commands. The severity of this issue is critical, as it enables the execution of high privilege OS commands with a less privileged role.

Recommendations: For Dell Enterprise SONiC OS versions 4.1.x through 4.2.x, upgrade at the earliest opportunity to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.