CVE-2025-45379
HighCVSS 8.4Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
Dell CloudLink versions prior to 8.2 contain a vulnerability where a privileged user with a known password can run command injection from the console to gain shell access to the system.
Risk Assessment
A privileged user can escalate privileges to full system access, potentially leading to compromise of confidentiality, integrity, and availability of data.
Recommendation
Update Dell CloudLink to version 8.2 or later. Restrict console access and regularly rotate privileged account passwords.
Other vulnerabilities in Dell CloudLink
See all- CVE-2025-46364Critical
Dell CloudLink versions prior to 8.1.1 contain a vulnerability where a privileged user with a known password can exploit a CLI escape to gain control of the system. The issue affects versions older than 8.1.1.
- CVE-2025-45378Critical
Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials of server, attack is possible through network with known privileged user/password.
- CVE-2025-30479High
Dell CloudLink versions prior to 8.2 contain a vulnerability where a privileged user with a known password can run command injection to gain control of the system.
Original NVD description (English source)
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS