Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
References
| Link | Resource |
|---|---|
| https://www.dell.com/support/kbdoc/en-us/000228355/dsa-2024-376-security-update-for-dell-networking-os10-vulnerability | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Sep 2024, 20:36
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:* | |
| References | () https://www.dell.com/support/kbdoc/en-us/000228355/dsa-2024-376-security-update-for-dell-networking-os10-vulnerability - Vendor Advisory | |
| First Time |
Dell smartfabric Os10
Dell |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
06 Sep 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-06 05:15
Updated : 2024-09-13 20:36
NVD link : CVE-2024-38486
Mitre link : CVE-2024-38486
JSON object : View
Products Affected
dell
- smartfabric_os10
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')