Product:
CloudLink
Summary
Dell CloudLink contains a Command Injection vulnerability that can be exploited by an authenticated attacker. This vulnerability allows the attacker to execute arbitrary commands on the affected system. The issue affects versions prior to 8.1.1.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-46365 |
Exploitation
To exploit this vulnerability, an authenticated attacker must have high privileges on the affected Dell CloudLink system. By leveraging these privileges, the attacker can inject malicious commands that the system will execute, potentially leading to unauthorized access or control over the system.
Affected Products
- Dell CloudLink: Affected versions prior to 8.1.1 are vulnerable to command injection attacks.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell CloudLink version 8.1.1 or later. Additionally, it is recommended to review user privileges and limit access to trusted users only to reduce the risk of exploitation.