Low Privileged Attacker Could Exploit Hard-coded Password Vulnerability

CVE-2024-39585

Summary

The vulnerability identified in Dell SmartFabric OS10 Software arises from the use of hard-coded passwords, impacting versions 10.5.5.4 through 10.5.5.10 and 10.5.6.x. This flaw creates an opportunity for low privileged attackers with remote access to exploit the system. Successful exploitation could result in client-side request forgery, enabling unauthorized operations and potentially leading to information disclosure. Users of the affected versions should take immediate action to secure their systems against this vulnerability.

References