Dell SmartFabric OS10 (command injection): Command injection from a low-privileged local account leading to code

Impact

Command injection from a low-privileged local account leading to code execution on the switch.

Who can reach it

Local low-privilege switch CLI access.

What to do

Upgrade OS10 per DSA-2024-425.

References

Related entries

• Dell SmartFabric OS10 (command injection): A low-privileged local attacker executes commands on the switch OSCVE-2024-49560 · Dell SmartFabric OS10 (command injection)High
• Dell SmartFabric OS10 (command injection): Command injection in SmartFabric OS10 10.5.5.4-10.5.5.10 and 10.5.6.xCVE-2024-38486 · Dell SmartFabric OS10 (command injection)High
• Dell SmartFabric OS10 (command injection): Second command-injection path in the same OS10 advisory, givingCVE-2025-46427 · Dell SmartFabric OS10 (command injection)High
• Dell SmartFabric OS10 (command injection): A low-privileged remote attacker executes code on the switch OSCVE-2025-46428 · Dell SmartFabric OS10 (command injection)High
• Dell SmartFabric OS10 (improper privilege management): A low-privileged local attacker elevates privileges on the switchCVE-2024-49558 · Dell SmartFabric OS10 (improper privilege management)High
• Dell SmartFabric OS10 (incorrect privilege assignment): Local low-privilege attacker escalates privileges on the switchCVE-2024-49561 · Dell SmartFabric OS10 (incorrect privilege assignment)High