CVE-2024-48829
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Risk Assessment
Risk of local code execution by an attacker with high privileges, potentially leading to full compromise of the device's operating system.
Recommendation
Upgrade Dell SmartFabric OS10 to version 10.6.1.0 or later, which includes a fix for the vulnerability.
Other vulnerabilities in Dell SmartFabric OS10
See all- CVE-2026-63696Critical
Dell SmartFabric OS10 versions prior to 10.6.1.3 contain a Download of Code Without Integrity Check vulnerability. A high-privileged attacker with remote access could exploit it to achieve code execution.
- CVE-2026-63695Critical
Dell SmartFabric OS10 versions prior to 10.6.1.3 contain a Session Fixation vulnerability. An unauthenticated attacker with remote access could exploit it to steal sessions.
- CVE-2026-63694Medium
Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
- CVE-2026-35160Medium
Dell SmartFabric OS10 Software versions prior to 10.5.6.14 contain an OS command injection vulnerability. A high privileged attacker with remote access could exploit this to execute commands.
Original NVD description (English source)
Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS