CVE-2025-45379: OS Command Injection
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell CloudLinkto a version that resolves this vulnerability.Fixed in 8.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-45379?
CVE-2025-45379 is categorized as a high severity vulnerability due to the potential for privileged command injection leading to unauthorized shell access.
How do I fix CVE-2025-45379?
To remediate CVE-2025-45379, upgrade Dell CloudLink to version 8.2 or later to ensure protection against this vulnerability.
Who is impacted by CVE-2025-45379?
Organizations using Dell CloudLink versions prior to 8.2 are at risk from CVE-2025-45379 and should take immediate action to update.
What kind of attack does CVE-2025-45379 enable?
CVE-2025-45379 allows a privileged user with a known password to execute command injection attacks, potentially gaining full shell access.
Is there a workaround for CVE-2025-45379 while I upgrade?
While upgrading is the recommended solution for CVE-2025-45379, temporarily restricting privileged user access can mitigate risks until the update is applied.