PT-2025-46710 · Dell · Dell Smartfabric Os10

Published 2025-11-12 · Updated 2025-11-12 · CVE-2025-46428

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell SmartFabric OS10 Software versions prior to 10.6.1.0

Description Dell SmartFabric OS10 Software versions prior to 10.6.1.0 contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') issue. A low privileged attacker with remote access could potentially exploit this, leading to Code execution.

Recommendations Update Dell SmartFabric OS10 Software to version 10.6.1.0 or later.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-14943

CVE-2025-46428

Affected Products

Dell Smartfabric Os10

References · 6

• https://bdu.fstec.ru/vul/2025-14943 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-46428 · Security Note
• https://dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-46428 · Vendor Advisory
• https://twitter.com/CveFindCom/status/1988753870135111930 · Twitter Post
• https://twitter.com/CVEnew/status/1988721700997845164 · Twitter Post