CVE-2025-45379 in CloudLink

Résumé

par MITRE • 05/11/2025

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Dell
• Réserver: 22/04/2025
• Divulgation: 05/11/2025
• Modérer: accepté
• Entrée: VDB-331301
• CPE: prêt
• CWE: CWE-78 (confirmé)
• CVSS: 8.4 (NVD)
• EPSS: 0.00671
• KEV: non
• Activités: très faible
• Secteur: Finance, Lawfirm, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-45379
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-45379
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-45379/