CVE-2025-46427 in SmartFabric OS10 Software

Riassunto

di MITRE • 12/11/2025

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: Dell
• Prenotare: 24/04/2025
• Divulgazione: 12/11/2025
• Moderazione: accettato
• Voce: VDB-332287
• CPE: pronto
• CWE: CWE-77 (confermato)
• CVSS: 8.8 (CNA)
• EPSS: 0.01243
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-46427
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-46427
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-46427/