CVE-2023-28078

The vulnerability stems from improper handling of communication by the zeroMQ component, activated when the VLT (Virtual Link Trunking) feature is configured on the switch. A remote attacker without any privileges can send a large number of requests to the device, leading to disclosure of sensitive information and potential exhaustion of switch resources resulting in denial of service. The lack of user interaction requirement and no need for permissions makes the exploit particularly easy to perform from the network.

An attacker can gain access to sensitive data processed by the switch (confidentiality breach) and cause its unavailability by sending a large number of requests (Denial of Service).

Dell recommends updating the software as soon as possible to a non-vulnerable version. Apply patches available from the manufacturer according to references (DSA-2023-124, available at: https://www.dell.com/support/kbdoc/en-us/000216584/dsa-2023-124-security-update-for-dell-smartfabric-os10-multiple-vulnerabilities). Until the patch is implemented, it is recommended to consider disabling or restricting network access to zeroMQ ports on devices with VLT.

Dell SmartFabric OS10 Networking Switches versions 10.5.2.x and later, with VLT (Virtual Link Trunking) configuration enabled.