Dell SmartFabric OS10 Command Injection Vulnerability Allowing Privilege Escalation

A command injection vulnerability has been identified in Dell SmartFabric OS10 Software versions 10.5.4.x, 10.5.5.x, 10.5.6.x, and 10.6.0.x. This vulnerability arises from improper neutralization of special elements used in commands, allowing a low-privileged attacker with local access to execute commands with elevated privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution with elevated privileges on the affected system.

Remediation

Users can upgrade to Dell SmartFabric OS10 version 10.6.0.2 to address this vulnerability. Instructions for downloading this version are available on the Dell SmartFabric OS10 downloads page.