7.8
High
CVE-2024-49557 Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization…
Description
Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SmartFabric OS10 Software 10.5 | 10.5.4.x → 10.5.6.x | No fix stated |
| smartfabric_os10 10.5 | 10.5.4.x → 10.5.6.x | No fix stated |
Other CVEs of SmartFabric OS10 Software
The 31 CVEs of SmartFabric OS10 Software →
CVE-2026-63696
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check…
9.1
Critical
CVE-2026-63695
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability
9.8
Critical
CVE-2026-35160
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements…
5.0
Medium
CVE-2026-22284
Dell SmartFabric OS10 Software, versions prior to 10.5.6.12, contains an Improper Neutralization of Special Elements…
6.6
Medium