Product:
SmartFabric OS10 Software
Summary
Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to code execution. This poses a significant risk to the integrity and confidentiality of the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-46428 |
Exploitation
To exploit this vulnerability, an attacker with low privileges and remote access can send specially crafted commands to the affected system. By manipulating input parameters, the attacker can execute arbitrary code, potentially gaining control over the system and compromising its security.
Affected Products
- SmartFabric OS10 Software versions prior to 10.6.1.0: Vulnerable to command injection, allowing remote code execution.
Mitigation
To mitigate this vulnerability, users should upgrade to SmartFabric OS10 Software version 10.6.1.0 or later. Regularly applying security updates and monitoring for unusual activity can also help protect against potential exploitation.