PT-2025-46709 · Dell · Dell Smartfabric Os10

Published 2025-11-12 · Updated 2025-11-12 · CVE-2025-46427

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions prior to 10.6.1.0

Description Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') issue. A low privileged attacker with remote access could potentially exploit this, leading to command execution.

Recommendations Update to version 10.6.1.0 or later.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-14942

CVE-2025-46427

Affected Products

Dell Smartfabric Os10

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-46427 · Security Note
• https://dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14942 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46427 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1988753897041563892 · Twitter Post
• https://twitter.com/CVEnew/status/1988721699999682877 · Twitter Post