CVE-2025-46427CWE-77command-injection

CVE-2025-46427

High · published November 13, 2025

CVSS v3.1
8.8
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

⚡ A remote attacker could tap into your system with nothing more than a well-crafted command! Think of it like a restaurant where a waiter can change the chef’s special by simply whispering the order without checking — they shouldn’t have that level of access, but here we are! This command injection vulnerability could allow an attacker to execute arbitrary commands on your system, potentially leading to unauthorized data access or even control of network devices — absolutely devastating! If exploited, it could leave your infrastructure vulnerable to severe disruptions or breaches.

Put simply

Think of it like a restaurant where a waiter can change the chef’s special by simply whispering the order without checking — they shouldn’t have that level of access, but here we are! The vulnerability in Dell SmartFabric OS10 allows low privileged users with remote access to run commands they shouldn't be able to, effectively bypassing security measures meant to protect command execution.

What to do

This command injection vulnerability could allow an attacker to execute arbitrary commands on your system, potentially leading to unauthorized data access or even control of network devices — absolutely devastating! If exploited, it could leave your infrastructure vulnerable to severe disruptions or breaches. Immediately upgrade to version 10.6.1.0 or later to patch this loophole. Additionally, review your access control policies to restrict remote command execution to authorized personnel only. You've got this! Follow these steps, and you'll be one step closer to locking down your systems! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01211 · 68.2th percentile
Weakness
CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published
2025-11-13T01:15Z
Affected products (1)
ProductVersionsFixed in
dell/smartfabric_os10< 10.6.1.010.6.1.0
References (1)
EPSS history
Timeline
  • 12 NOV 20:01Z
    Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection')…
    cvelistv5