PT-2025-31426 · Dell · Dell Smartfabric Os10

CVE-2025-36608 · Published 2025-07-17 · Updated 2025-07-30

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions prior to 10.6.0.5

Description Dell SmartFabric OS10 Software is susceptible to an Improper Restriction of XML External Entity Reference issue. A low privileged attacker with remote access could potentially exploit this, leading to unauthorized access.

Recommendations Update to version 10.6.0.5 or later.

Fix

DoS

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2025-09259

CVE-2025-36608

Affected Products

Dell Smartfabric Os10

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-36608 · Security Note
• https://osv.dev/vulnerability/CVE-2025-36608 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000346195/dsa-2025-259-security-update-for-dell-networking-os10-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09259 · Security Note
• https://twitter.com/CVEnew/status/1950631342925865456 · Twitter Post
• https://t.me/CVEtracker/28770 · Telegram Post