Product:
CloudLink
Summary
Dell CloudLink contains a vulnerability that allows a privileged user with a known password to execute a CLI Escape Vulnerability, potentially gaining control of the system. This issue affects versions prior to 8.1.1. The vulnerability poses significant risks to system integrity and confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.1 | CVE-2025-46364 |
Exploitation
To exploit this vulnerability, an attacker must have privileged access to the system and know the password. Once these conditions are met, the attacker can execute commands that bypass normal security controls, allowing them to take control of the system and potentially access sensitive data.
Affected Products
- CloudLink: Affected versions prior to 8.1.1 are vulnerable to CLI Escape Vulnerability.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to CloudLink version 8.1.1 or later. Additionally, ensure that privileged accounts have strong, unique passwords and limit access to trusted users only.