CVE-2024-39577: Dell Smartfabric OS10

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability leading to code execution.

Affected products

• Dell Smartfabric OS10: from 10.5.3.0, before 10.5.3.11 (fixed in 10.5.3.11); from 10.5.4.0, before 10.5.4.12 (fixed in 10.5.4.12); from 10.5.5.0, before 10.5.5.11 (fixed in 10.5.5.11); from 10.5.6.0, before 10.5.6.4 (fixed in 10.5.6.4)

Published 2024-09-26. Last modified 2026-06-17.