« Volver al listado

CVE-2024-48013

Estado: AnalizadaAlta (8.8)—

Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vector CVSS con AV:N, PR:L indica acceso remoto con privilegios bajos. CWE-250 (ejecución con privilegios innecesarios) y descripción explícita de 'Elevation of privileges' confirman T1068 como impacto tras explotar servicios remotos (T1210).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramApplication Isolation and SandboxingExploit ProtectionUpdate SoftwareVulnerability ScanningPrivileged Account Management

Tecnologías afectadas (1)

Dell — Smartfabric Os10

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-48013",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-48013",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-18T03:55:20.659676Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security_alert@emc.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "SmartFabric OS10 Software",
          "versions": [
            {
              "status": "affected",
              "version": "10.5.4.x"
            },
            {
              "status": "affected",
              "version": "10.5.5.x"
            },
            {
              "status": "affected",
              "version": "10.5.6.x"
            },
            {
              "status": "affected",
              "version": "10.6.0.x"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-03-17T17:15:30.603",
  "references": [
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000289970/dsa-2025-070-security-update-for-dell-networking-os10-vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000293638/dsa-2025-069-security-update-for-dell-networking-os10-vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000294091/dsa-2025-079-security-update-for-dell-networking-os10-vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000295014/dsa-2025-068-security-update-for-dell-networking-os10-vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security_alert@emc.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-250"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell SmartFabric OS10 Software, version(s) 10.5.4.x, 10.5.5.x, 10.5.6.x, 10.6.0.x, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges."
    },
    {
      "lang": "es",
      "value": "Dell SmartFabric OS10 Software, versiones 10.5.4.x, 10.5.5.x, 10.5.6.x y 10.6.0.x, contiene una vulnerabilidad de ejecución con privilegios innecesarios. Un atacante con acceso remoto y pocos privilegios podría explotar esta vulnerabilidad, lo que provocaría una elevación de privilegios."
    }
  ],
  "lastModified": "2026-06-17T07:58:06.050",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14A2BCBC-C50A-4B11-9871-B84254872EEA",
              "versionEndExcluding": "10.5.4.14",
              "versionStartIncluding": "10.5.4.0"
            },
            {
              "criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A05AAE8C-8DCD-44E9-AC99-0C32F9BD80E4",
              "versionEndExcluding": "10.5.5.13",
              "versionStartIncluding": "10.5.5.0"
            },
            {
              "criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "430E412C-6FB3-437C-90D7-C73CBF498801",
              "versionEndExcluding": "10.5.6.8",
              "versionStartIncluding": "10.5.6.0"
            },
            {
              "criteria": "cpe:2.3:o:dell:smartfabric_os10:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8DC8731-306C-4D6B-84FA-3F13B9E677B1",
              "versionEndExcluding": "10.6.0.2",
              "versionStartIncluding": "10.6.0.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}