Introduction
Dell Enterprise SONiC OS, a widely used network operating system in data centers and cloud environments, was recently found to have a cryptographic key vulnerability in its SSH implementation. Unauthenticated remote attackers can exploit it to intercept or access communications. Because SSH is how administrators reach network management, unauthorized access here can expose sensitive communications and compromise critical infrastructure.
Dell Technologies is a major enterprise IT vendor whose products span servers, storage, networking, and software. Enterprise SONiC OS is Dell's commercial distribution of the open-source SONiC platform, and it runs network switches in large-scale data centers and cloud deployments worldwide. Organizations that rely on Dell's networking products for secure and reliable operations depend on SONiC OS being secure.
Technical Information
CVE-2025-38741 affects Dell Enterprise SONiC OS version 4.5.0 and is classified as CWE-321 (Use of Hard-coded Cryptographic Key). The root cause is improper cryptographic key management in the SSH service, which ends up using hard-coded or predictable keys. An unauthenticated remote attacker can use this flaw to compromise SSH communications and gain unauthorized access to network management interfaces and sensitive data.
The CVSS vector is:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Attack Vector: Network (can be exploited remotely)
- Attack Complexity: Low (no special conditions required)
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Confidentiality Impact: High
- Integrity Impact: None
- Availability Impact: None
Dell's advisory confirms that regenerating the SSH keys with these CLI commands resolves the issue:
sonic# crypto ssh-keygen ecdsa 256
sonic# crypto ssh-keygen rsa 2048
Version 4.5.0a includes the permanent fix.
Affected Systems and Versions
- Product: Dell Enterprise SONiC OS
- Affected Version: 4.5.0 only
- Fixed Version: 4.5.0a and later
- Vulnerable configuration: Default SSH key management in version 4.5.0
Vendor Security History
Dell has fixed similar SSH key vulnerabilities in its SONiC OS products before. DSA-2022-257, for example, covered SSH cryptographic key issues in earlier versions. Dell generally responds to vulnerabilities promptly, with clear advisories and patch releases. The recurrence of cryptographic key management issues, though, points to a weak spot in Dell's development and QA processes that still needs work.
