Software Engineering Institute

CWE-20: Improper Input Validation
Dell PowerConnect 3348 version 1.2.1.3, PowerConnect 3524p version 2.0.0.48, and Dell PowerConnect 5324 version 2.0.1.4 crash when a large amount of data is sent to the SSH port. This can allow an unauthenticated attacker to reset the switch and may lead to exploitation and execution of arbitrary code. CVE-2013-3594

Dell OpenManage web application version 2.5 Build No. 1.19 crashes when an undocumented URL for OSPF functionality is visited. This page is not accessible from the web application links but can be found in the firmware. This can allow an authenticated attacker to crash and reset the switch. CVE-2013-3595

Dell's GoAhead web server login page form crashes when a username length greater than 16 characters is submitted directly to the web-server via a crafted HTTP POST request. An unauthenticated attacker may be able to make the switch unresponsive until the device is reset. This attack may require multiple requests. CVE-2013-3606

The CVSS score reflects the CVE-2013-3594 vulnerability.

An unauthenticated attacker may be able to crash and reset the system that can lead to exploitation and execution of arbitrary code. CVE-2013-3594

An authenticated attacker may be able to crash the OpenManage web application to crash and reset the system. CVE-2013-3595

An unauthenticated attacker may be able to crash the GoAhead web server login page to crash the system. CVE-2013-3606

We are currently unaware of a practical solution to this problem. Please consider the following workaround.

Restrict Access

Restrict access to the PowerConnect interface to trusted networks. If possible, configure management and transit networks for separate VLANs, or restrict access to the device using appropriate firewall rules.