Dell Cloudlink vulnerabilities

16 CVEs affecting Dell Cloudlink, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-46424, published 2025-11-05.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-36313, published 2021-11-23. High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days. Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of…
• CVE-2021-36312, published 2021-11-23. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit…
• CVE-2022-34379, published 2022-09-01. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this…
• CVE-2025-30479, published 2025-11-05. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.
• CVE-2025-45379, published 2025-11-05. High severity, CVSS 8.4. EPSS: 0.7% chance of exploitation in the next 30 days. Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.
• CVE-2022-24414, published 2022-05-26. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Dell EMC CloudLink 7.1.3 and all earlier versions, Auth Token is exposed in GET requests. These request parameters can get logged in reverse proxies and server logs. Attackers may potentially use…
• CVE-2023-28076, published 2023-05-16. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. CloudLink 7.1.2 and all prior versions contain a broken or risky cryptographic algorithm vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability leading to…
• CVE-2025-45378, published 2025-11-05. Critical severity, CVSS 9.1. EPSS: 0.4% chance of exploitation in the next 30 days. Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell…
• CVE-2024-38482, published 2024-08-02. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. CloudLink, versions 7.1.x and 8.x, contain an Improper check or handling of Exceptional Conditions Vulnerability in Cluster Component. A highly privileged malicious user with remote access could…
• CVE-2025-46365, published 2025-11-05. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CloudLink.

Latest

• CVE-2025-46424, published 2025-11-05. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability…
• CVE-2025-46366, published 2025-11-05. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confidential…
• CVE-2025-46364, published 2025-11-05. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system.
• CVE-2025-26484, published 2025-08-14. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Dell CloudLink, versions 8.0 through 8.1.1, contains an Improper Restriction of XML External Entity Reference vulnerability. A high privileged attacker with remote access could potentially exploit…
• CVE-2024-37137, published 2024-06-28. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell Key Trust Platform, v3.0.6 and prior, contains Use of a Cryptographic Primitive with a Risky Implementation vulnerability. A local privileged attacker could potentially exploit this…