PT-2025-45121 · Dell · Cloudlink

Published 2025-11-05 · Updated 2025-11-05 · CVE-2025-45378

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell CloudLink versions 8.0 through 8.1.2

Description A flaw in the restricted shell allows a privileged user with a known password to break into the command shell of the server. This can lead to privilege escalation and unauthorized system access. If SSH is enabled using the server's web credentials, the attack can be executed over the network.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2025-45378

Affected Products

Cloudlink

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-45378 · Security Note
• https://osv.dev/vulnerability/CVE-2025-45378 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000384363/dsa-2025-374-security-update-for-dell-cloudlink-multiple-security-vulnerabilities · Vendor Advisory