Vulnerabilities > CVE-2024-49561 - Incorrect Privilege Assignment vulnerability in Dell Smartfabric Os10

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

dell

CWE-266

NVD

Published: 2025-03-17

Updated: 2025-05-08

Summary

Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Vulnerable Configurations

Part	Description	Count
OS	Dell Dell Smartfabric Os10 10.5.4.0 Dell Smartfabric Os10 10.5.4.1 Dell Smartfabric Os10 10.5.4.2 Dell Smartfabric Os10 10.5.4.3 Dell Smartfabric Os10 10.5.4.4 Dell Smartfabric Os10 10.5.4.5 Dell Smartfabric Os10 10.5.4.6 Dell Smartfabric Os10 10.5.4.7 Dell Smartfabric Os10 10.5.4.8 Dell Smartfabric Os10 10.5.4.9 Dell Smartfabric Os10 10.5.4.10 Dell Smartfabric Os10 10.5.4.11 Dell Smartfabric Os10 10.5.4.12 Dell Smartfabric Os10 10.5.4.13 Dell Smartfabric Os10 10.5.5.0 Dell Smartfabric Os10 10.5.5.1 Dell Smartfabric Os10 10.5.5.2 Dell Smartfabric Os10 10.5.5.3 Dell Smartfabric Os10 10.5.5.4 Dell Smartfabric Os10 10.5.5.5 Dell Smartfabric Os10 10.5.5.6 Dell Smartfabric Os10 10.5.5.7 Dell Smartfabric Os10 10.5.5.8 Dell Smartfabric Os10 10.5.5.9 Dell Smartfabric Os10 10.5.5.10 Dell Smartfabric Os10 10.5.5.11 Dell Smartfabric Os10 10.5.5.12 Dell Smartfabric Os10 10.5.6.0 Dell Smartfabric Os10 10.5.6.1 Dell Smartfabric Os10 10.5.6.2 Dell Smartfabric Os10 10.5.6.3 Dell Smartfabric Os10 10.5.6.4 Dell Smartfabric Os10 10.5.6.5 Dell Smartfabric Os10 10.5.6.6 Dell Smartfabric Os10 10.6.0.0 Dell Smartfabric Os10 10.6.0.1	36

Common Weakness Enumeration (CWE)

CWE-266 - Incorrect Privilege Assignment

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References