CVE-2024-48829

MediumCVSS 6.7/10Last modified Oct 6, 2026

Description

Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
Dell	SmartFabric OS10 Software	>= N/A, < 10.6.1.0

References

https://www.dell.com/support/kbdoc/en-us/000391062/dsa-2025-407-security-update-for-dell-networking-os10-vulnerabilitiesVendor Advisory

Timeline

Published: Nov 12, 2025
Last modified: Oct 6, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-48839.8In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold. This vulnerability allows CVE-2024-488307.8Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Improper Neutralization of Special Elements CVE-2024-488318.4Dell SmartFabric OS10 Software, version(s) 10.5.6.x, contain(s) a Use of Hard-coded Password vulnerability. An unauthenticated attacker with CVE-2024-488377.8Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an Execution with Unnecessary Privileges vulne CVE-2024-488383.3Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Accessible to External CVE-2024-488399.8Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series CVE-2024-48849.8In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold. The Apm.CVE-2024-488409.8Unauthorized Access vulnerabilities allow Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08 CVE-2024-4884110.0Network access can be used to execute arbitrary code with elevated privileges. This issue affects FLXEON 9.3.4 and older.CVE-2024-488427.0Use of Hard-coded Credentials vulnerability in ABB FLXEON.This issue affects FLXEON: through 9.3.5 and newer versions CVE-2024-488437.5Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Ente CVE-2024-488446.5Denial of Service vulnerabilities where found providing a potiential for device service disruptions. Affected products: ABB ASPECT - Ente