VAR-201401-0096
Vulnerability from variot - Updated: 2025-04-11 22:48The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device reset) or possibly execute arbitrary code by sending many packets to TCP port 22. Dell PowerConnect 3348 version 1.2.1.3, PowerConnect 3524p version 2.0.0.48, PowerConnect 5324 version 2.0.1.4, and possibly earlier versions contain a denial-of-service (CWE-20) vulnerability.Dell OpenManage web application version 2.5 Build No. 1.19 and possibly earlier versions contain a denial-of-service (CWE-20) vulnerability.Dell GoAhead web server login page also contains a denial-of-service (CWE-20) vulnerability. Dell PowerConnect is a switch product developed by Dell. Dell Multiple PowerConnect Switches are prone to a remote code-execution vulnerability. Failed exploit attempts will result in a denial-of-service condition
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201401-0096",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "powerconnect 3524p",
"scope": "eq",
"trust": 2.2,
"vendor": "dell",
"version": "2.0.0.48"
},
{
"model": "powerconnect 5324",
"scope": "eq",
"trust": 1.6,
"vendor": "dell",
"version": "2.0.1.4"
},
{
"model": "powerconnect 3348",
"scope": "eq",
"trust": 1.6,
"vendor": "dell",
"version": "1.2.1.3"
},
{
"model": null,
"scope": null,
"trust": 0.8,
"vendor": "dell computer",
"version": null
},
{
"model": "powerconnect 3348",
"scope": "lte",
"trust": 0.8,
"vendor": "dell",
"version": "firmware 1.2.1.3"
},
{
"model": "powerconnect 3524p",
"scope": "lte",
"trust": 0.8,
"vendor": "dell",
"version": "firmware 2.0.0.48"
},
{
"model": "powerconnect 5324",
"scope": "lte",
"trust": 0.8,
"vendor": "dell",
"version": "firmware 2.0.1.4"
},
{
"model": "powerconnect",
"scope": "eq",
"trust": 0.6,
"vendor": "dell",
"version": "33481.2.1.3"
},
{
"model": "powerconnect",
"scope": "eq",
"trust": 0.6,
"vendor": "dell",
"version": "53242.0.1.4"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#122582"
},
{
"db": "CNVD",
"id": "CNVD-2014-00467"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001214"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-381"
},
{
"db": "NVD",
"id": "CVE-2013-3594"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:dell:powerconnect_3348",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:dell:powerconnect_3524p",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:dell:powerconnect_5324",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-001214"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Rijnard van Tonder",
"sources": [
{
"db": "BID",
"id": "65070"
}
],
"trust": 0.3
},
"cve": "CVE-2013-3594",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "CVE-2013-3594",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "CNVD-2014-00467",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.6,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 10.0,
"id": "VHN-63596",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2013-3594",
"trust": 1.0,
"value": "HIGH"
},
{
"author": "NVD",
"id": "CVE-2013-3594",
"trust": 0.8,
"value": "High"
},
{
"author": "CNVD",
"id": "CNVD-2014-00467",
"trust": 0.6,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-201401-381",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-63596",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00467"
},
{
"db": "VULHUB",
"id": "VHN-63596"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001214"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-381"
},
{
"db": "NVD",
"id": "CVE-2013-3594"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device reset) or possibly execute arbitrary code by sending many packets to TCP port 22. Dell PowerConnect 3348 version 1.2.1.3, PowerConnect 3524p version 2.0.0.48, PowerConnect 5324 version 2.0.1.4, and possibly earlier versions contain a denial-of-service (CWE-20) vulnerability.Dell OpenManage web application version 2.5 Build No. 1.19 and possibly earlier versions contain a denial-of-service (CWE-20) vulnerability.Dell GoAhead web server login page also contains a denial-of-service (CWE-20) vulnerability. Dell PowerConnect is a switch product developed by Dell. Dell Multiple PowerConnect Switches are prone to a remote code-execution vulnerability. Failed exploit attempts will result in a denial-of-service condition",
"sources": [
{
"db": "NVD",
"id": "CVE-2013-3594"
},
{
"db": "CERT/CC",
"id": "VU#122582"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001214"
},
{
"db": "CNVD",
"id": "CNVD-2014-00467"
},
{
"db": "BID",
"id": "65070"
},
{
"db": "VULHUB",
"id": "VHN-63596"
}
],
"trust": 3.24
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#122582",
"trust": 3.9
},
{
"db": "NVD",
"id": "CVE-2013-3594",
"trust": 3.4
},
{
"db": "JVN",
"id": "JVNVU95569358",
"trust": 0.8
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001214",
"trust": 0.8
},
{
"db": "CNVD",
"id": "CNVD-2014-00467",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-201401-381",
"trust": 0.6
},
{
"db": "BID",
"id": "65070",
"trust": 0.4
},
{
"db": "VULHUB",
"id": "VHN-63596",
"trust": 0.1
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#122582"
},
{
"db": "CNVD",
"id": "CNVD-2014-00467"
},
{
"db": "VULHUB",
"id": "VHN-63596"
},
{
"db": "BID",
"id": "65070"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001214"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-381"
},
{
"db": "NVD",
"id": "CVE-2013-3594"
}
]
},
"id": "VAR-201401-0096",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00467"
},
{
"db": "VULHUB",
"id": "VHN-63596"
}
],
"trust": 1.34519232
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"Network device"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2014-00467"
}
]
},
"last_update_date": "2025-04-11T22:48:24.480000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "PowerConnect 3524P",
"trust": 0.8,
"url": "http://www.dell.com/support/drivers/us/en/04/Product/powerconnect-3524p"
},
{
"title": "PowerConnect 5324",
"trust": 0.8,
"url": "http://www.dell.com/support/drivers/us/en/04/Product/powerconnect-5324"
},
{
"title": "PowerConnect 3348",
"trust": 0.8,
"url": "http://www.dell.com/support/drivers/us/en/04/Product/powerconnect-3348"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2014-001214"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-20",
"trust": 2.7
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#122582"
},
{
"db": "VULHUB",
"id": "VHN-63596"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001214"
},
{
"db": "NVD",
"id": "CVE-2013-3594"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.1,
"url": "http://www.kb.cert.org/vuls/id/122582"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/90595"
},
{
"trust": 0.8,
"url": "http://cwe.mitre.org/data/definitions/20.html"
},
{
"trust": 0.8,
"url": "http://www.dell.com/support/drivers/us/en/04/product/powerconnect-3348"
},
{
"trust": 0.8,
"url": "http://www.dell.com/support/drivers/us/en/04/product/powerconnect-3524p"
},
{
"trust": 0.8,
"url": "http://www.dell.com/support/drivers/us/en/04/product/powerconnect-5324"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-3594"
},
{
"trust": 0.8,
"url": "http://jvn.jp/vu/jvnvu95569358"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-3594"
},
{
"trust": 0.3,
"url": "http://dell.com"
}
],
"sources": [
{
"db": "CERT/CC",
"id": "VU#122582"
},
{
"db": "CNVD",
"id": "CNVD-2014-00467"
},
{
"db": "VULHUB",
"id": "VHN-63596"
},
{
"db": "BID",
"id": "65070"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001214"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-381"
},
{
"db": "NVD",
"id": "CVE-2013-3594"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CERT/CC",
"id": "VU#122582"
},
{
"db": "CNVD",
"id": "CNVD-2014-00467"
},
{
"db": "VULHUB",
"id": "VHN-63596"
},
{
"db": "BID",
"id": "65070"
},
{
"db": "JVNDB",
"id": "JVNDB-2014-001214"
},
{
"db": "CNNVD",
"id": "CNNVD-201401-381"
},
{
"db": "NVD",
"id": "CVE-2013-3594"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-01-17T00:00:00",
"db": "CERT/CC",
"id": "VU#122582"
},
{
"date": "2014-01-21T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-00467"
},
{
"date": "2014-01-20T00:00:00",
"db": "VULHUB",
"id": "VHN-63596"
},
{
"date": "2014-01-17T00:00:00",
"db": "BID",
"id": "65070"
},
{
"date": "2014-01-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-001214"
},
{
"date": "2014-01-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201401-381"
},
{
"date": "2014-01-20T04:58:49.647000",
"db": "NVD",
"id": "CVE-2013-3594"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2014-01-17T00:00:00",
"db": "CERT/CC",
"id": "VU#122582"
},
{
"date": "2014-01-21T00:00:00",
"db": "CNVD",
"id": "CNVD-2014-00467"
},
{
"date": "2017-08-29T00:00:00",
"db": "VULHUB",
"id": "VHN-63596"
},
{
"date": "2014-01-22T19:35:00",
"db": "BID",
"id": "65070"
},
{
"date": "2014-01-22T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2014-001214"
},
{
"date": "2014-01-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201401-381"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2013-3594"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201401-381"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Dell PowerConnect 3348, 3524p, and 5324 switches are vulnerable to denial-of-service attacks",
"sources": [
{
"db": "CERT/CC",
"id": "VU#122582"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "input validation",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201401-381"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…