Product:
CloudLink
Summary
Dell CloudLink contains a vulnerability that allows a privileged user with a known password to execute command injection from the console. This can lead to unauthorized shell access to the system. The issue affects versions prior to 8.2 and poses significant security risks.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.4 | CVE-2025-45379 |
Exploitation
To exploit this vulnerability, an attacker must have privileged access to the system and know the password. Once these conditions are met, the attacker can run command injection through the console, which can lead to gaining shell access and potentially compromising the entire system.
Affected Products
- CloudLink: Affected versions prior to 8.2 allow command injection by privileged users.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to the latest version of Dell CloudLink. Additionally, ensure that strong password policies are enforced and limit privileged access to trusted users only.