Dell SmartFabric OS10 Command Injection Vulnerability Allowing Code Execution

A command injection vulnerability has been identified in Dell SmartFabric OS10 Software versions 10.5.4.x, 10.5.5.x, 10.5.6.x, and 10.6.0.x. This vulnerability arises from improper neutralization of special elements used in commands, allowing a low-privileged attacker with local access to execute commands on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution on the affected system.

Remediation

Users can upgrade to Dell SmartFabric OS10 version 10.6.0.2 to address this vulnerability. Instructions for downloading this version are available on the Dell SmartFabric OS10 downloads page.