CVE-2022-29089: Dell Smartfabric OS10

Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Dell Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an information disclosure vulnerability. A remote, unauthenticated attacker could potentially exploit this vulnerability by reverse engineering to retrieve sensitive information and access the REST API with admin privileges.

Affected products

• Dell Smartfabric OS10: from 10.5.1.0, before 10.5.1.11 (fixed in 10.5.1.11); from 10.5.2.0, before 10.5.2.11 (fixed in 10.5.2.11); from 10.5.3.0, before 10.5.3.5 (fixed in 10.5.3.5)

Published 2022-09-28. Last modified 2026-06-17.