PT-2025-46705 · Dell · Dell Smartfabric Os10

Published 2025-11-12 · Updated 2025-11-12 · CVE-2024-48829

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions prior to 10.6.1.0

Description Dell SmartFabric OS10 Software versions prior to 10.6.1.0 contain an Improper Control of Generation of Code issue, also known as a Code Injection issue. A local attacker with high privileges could potentially exploit this, leading to Code execution.

Recommendations Update to version 10.6.1.0 or later.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-48829

Affected Products

Dell Smartfabric Os10

References · 4

• https://osv.dev/vulnerability/CVE-2024-48829 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48829 · Security Note
• https://dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities · Vendor Advisory
• https://twitter.com/CVEnew/status/1988721701970944277 · Twitter Post