Product:
SmartFabric OS10 Software
Summary
Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to code execution. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2024-48829 |
Exploitation
To exploit this vulnerability, an attacker with high privileges and local access can manipulate the code generation process within the affected software. By executing specially crafted commands or inputs, the attacker can trigger the code injection, allowing them to execute arbitrary code on the system.
Affected Products
- SmartFabric OS10 Software: Versions prior to 10.6.1.0 are vulnerable to code injection attacks.
Mitigation
To mitigate this vulnerability, users should upgrade to SmartFabric OS10 Software version 10.6.1.0 or later. Regularly applying security updates and patches is essential to protect against potential exploits and maintain system integrity.