CVE-2025-30479: OS Command Injection
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell CloudLinkto a version that resolves this vulnerability.Fixed in 8.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30479?
CVE-2025-30479 is classified as a high severity vulnerability due to the potential for command injection by privileged users.
How do I fix CVE-2025-30479?
To mitigate CVE-2025-30479, update Dell CloudLink to version 8.2 or later as soon as possible.
Who is affected by CVE-2025-30479?
CVE-2025-30479 affects all versions of Dell CloudLink prior to 8.2.
What kind of attack does CVE-2025-30479 allow?
CVE-2025-30479 allows a privileged user with a known password to execute command injection attacks.
Is there a workaround for CVE-2025-30479?
There are no documented effective workarounds for CVE-2025-30479; upgrading is the recommended solution.