Dell CloudLink Command Injection Vulnerability Allowing Shell Access for Privileged Users

A command injection vulnerability has been identified in Dell CloudLink versions prior to 8.2. This issue allows a privileged user with a known password to execute commands via the console, potentially leading to unauthorized shell access on the system. If SSH is enabled with the web credentials of the server, this vulnerability could be exploited remotely.

Impact

Exploitation of this vulnerability could result in unauthorized shell access on the system, allowing for command execution with elevated privileges.

Remediation

Users are advised to update to Dell CloudLink version 8.2 or later. Instructions for downloading the update are available on the Dell CloudLink Downloads page.