Product:
SmartFabric OS10 Software
Summary
Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-46427 |
Exploitation
To exploit this vulnerability, an attacker with low privileges and remote access can send specially crafted commands to the affected system. By manipulating the input, the attacker can execute arbitrary commands on the server, potentially leading to unauthorized access and control over the system.
Affected Products
- SmartFabric OS10 Software: Versions prior to 10.6.1.0 are vulnerable to command injection attacks.
Mitigation
To mitigate this vulnerability, users should upgrade to SmartFabric OS10 Software version 10.6.1.0 or later. Additionally, implementing network security measures to restrict remote access can help reduce the risk of exploitation.