CVE-2025-30479
HighCVSS 8.4Exploitation Probability (EPSS)
Elevated risk63th percentile - higher than 63% of all known CVEs
Summary
Dell CloudLink versions prior to 8.2 contain a vulnerability where a privileged user with a known password can run command injection to gain control of the system.
Risk Assessment
A privileged user with a known password can exploit the vulnerability to execute arbitrary commands and take control of the system. This may lead to confidentiality and integrity breaches.
Recommendation
Update Dell CloudLink to version 8.2 or later. Apply least privilege and regularly rotate passwords for privileged accounts.
Other vulnerabilities in Dell CloudLink
See all- CVE-2025-46364Critical
Dell CloudLink versions prior to 8.1.1 contain a vulnerability where a privileged user with a known password can exploit a CLI escape to gain control of the system. The issue affects versions older than 8.1.1.
- CVE-2025-45378Critical
Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials of server, attack is possible through network with known privileged user/password.
- CVE-2025-45379High
Dell CloudLink versions prior to 8.2 contain a vulnerability where a privileged user with a known password can run command injection from the console to gain shell access to the system.
Original NVD description (English source)
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS