7.5
High
CVE-2024-38486 Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper…
Description
Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SmartFabric OS10 Software 10.5 | 10.5.5.4 → 10.5.6.x | No fix stated |
| smartfabric_os10 10.5 | 10.5.5.4 → < 10.5.6.4 | 10.5.6.4 |
Other CVEs of SmartFabric OS10 Software
The 31 CVEs of SmartFabric OS10 Software →
CVE-2026-63696
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check…
9.1
Critical
CVE-2026-63695
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability
9.8
Critical
CVE-2026-35160
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements…
5.0
Medium
CVE-2026-22284
Dell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization of Special Elements…
6.6
Medium