Dell SmartFabric OS10 Command Injection Vulnerability Allowing Unauthorized Command Execution

A command injection vulnerability has been identified in Dell SmartFabric OS10 Software versions 10.5.4.x, 10.5.5.x, 10.5.6.x, and 10.6.0.x. This vulnerability arises from improper neutralization of special elements used in commands, allowing a high-privileged attacker with local access to execute arbitrary commands on the affected system.

Impact

Exploitation of this vulnerability allows for unauthorized command execution with elevated privileges on the affected system.

Remediation

Users can upgrade to Dell SmartFabric OS10 version 10.6.0.2 to address this vulnerability. Instructions for downloading this version are available on the Dell SmartFabric OS10 downloads page.