title: DSA-2019-019: Dell Networking OS10 OS Command Injection Vulnerability
description: Dell OS10 versions prior to 10.4.2.1 contain a vulnerability caused by lack of proper input validation on the command-line interface (CLI).
problem types: This vulnerability could potentially allow an attacker to execute unexpected, dangerous commands directly on the operating system.
affected:
{
product: Dell Networking OS10
vendor: Dell
versions:
status: affected, version: 10.4.2.1
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
version: 3.0
]