CVE-2023-39248

Dell OS10 Networking Switches running 10.5.2.x and above contain an Uncontrolled Resource Consumption (Denial of Service) vulnerability, when switches are configured with VLT and VRRP. A remote unauthenticated user can cause the network to be flooded leading to Denial of Service for actual network users. This is a high severity vulnerability as it allows an attacker to cause an outage of network. Dell recommends customers to upgrade at the earliest opportunity.

• CWE-400

• https://www.dell.com/support/kbdoc/en-us/000220138/dsa-2023-278-dell-networking-os10-security-updates-for-uncontrolled-resource-consumptionVendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000220138/dsa-2023-278-dell-networking-os10-security-updates-for-uncontrolled-resource-consumptionVendor Advisory

Published

Dec 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39238 It is identified a format string vulnerability in ASUS RT-A…7.2
• CVE-2023-39239 It is identified a format string vulnerability in ASUS RT-A…7.2
• CVE-2023-39240 It is identified a format string vulnerability in ASUS RT-A…7.2
• CVE-2023-39244DELL ESI (Enterprise Storage Integrator) for SAP LAMA, versi…9.8
• CVE-2023-39245 DELL ESI (Enterprise Storage Integrator) for SAP LAMA, vers…9.8
• CVE-2023-39246 Dell Encryption, Dell Endpoint Security Suite Enterprise, a…7.3
• CVE-2023-39249 Dell SupportAssist for Business PCs version 3.4.0 contains …5.3
• CVE-2023-39250 Dell Storage Integration Tools for VMware (DSITV) and Del…5.5
• CVE-2023-39251 Dell BIOS contains an Improper Input Validation vulnerabili…6.7
• CVE-2023-39252 Dell SCG Policy Manager 5.16.00.14 contains a broken crypt…5.9
• CVE-2023-39253 Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2…7.8
• CVE-2023-39254Dell Update Package (DUP), Versions prior to 4.9.10 contain …7.3