CVE-2024-48829 - Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability

Back Back to CVE browser

MEDIUM

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability

Published Nov 12, 2025

6.7

MEDIUM

CVSS 3.1

EPSS 0.17%

Description

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Affected products

Vendor Dell Product SmartFabric OS10 Software Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <10.6.1.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

SmartFabric OS10 Software

unaffected

Version	Status	Constraints
-	affected	<10.6.1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-131947
Advisory
https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-131947		Advisory
https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilities		vendor-advisoryVendor Advisory