CVE-2025-45378: Cloudlink: işletim sistemi komut enjeksiyonu

Açıklama (NVD)

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials of server, attack is possible through network with known privileged user/password.

Özet bilgiler

Ürün

Dell Cloudlink

CVSS v3.1

9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

%0,38 (yüzdelik 32)

CWE

CWE-78

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• www.dell.com
• CWE-78