CVE-2025-46428

Dell SmartFabric OS10 versions prior to 10.6.1.3 contain a Download of Code Without Integrity Check vulnerability. A high-privileged attacker with remote access could exploit it to achieve code execution.

Dell SmartFabric OS10 versions prior to 10.6.1.3 contain a Session Fixation vulnerability. An unauthenticated attacker with remote access could exploit it to steal sessions.

Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.

Dell SmartFabric OS10 Software versions prior to 10.5.6.14 contain an OS command injection vulnerability. A high privileged attacker with remote access could exploit this to execute commands.

Dell SmartFabric OS10 Software versions prior to 10.6.1.0 contain a command injection vulnerability due to improper neutralization of special elements. A low-privileged attacker with remote access could exploit this to execute commands.

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.