CVE-2024-48838: smartfabric os10 — Fix

Description

Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker.

Is your site exposed to CVE-2024-48838?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

3.3

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness Type (CWE)

CWE-552 CWE-552

Affected Products

Vendor	Product	Versions
dell	smartfabric_os10	10.5.4.0 — 10.5.4.13
dell	smartfabric_os10	10.5.5.0 — 10.5.5.12
dell	smartfabric_os10	10.5.6.0 — 10.5.6.6

References

Advisories & Patches

https://www.dell.com/support/kbdoc/en-us/000247217/dsa-2024-425-security-update-for-dell-networking-os10-vulnerabilities

Frequently Asked Questions

What is CVE-2024-48838? +

Dell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker. It has a CVSS v3.1 base score of 3.3 (LOW).

How severe is CVE-2024-48838? +

CVE-2024-48838 has a CVSS v3.1 score of 3.3 out of 10, rated LOW. This is a low-severity vulnerability with limited impact.

What products are affected by CVE-2024-48838? +

CVE-2024-48838 affects products from dell, specifically: smartfabric_os10. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-48838? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2023-29080

Potential privilege escalation vulnerability in Revenera InstallShield versions 2022 R2 and 2021 R2 due to adding InstallScript custom action to …

CVE-2026-109162

Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder 1:/user_upload/ …

CVE-2026-21589

This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, …

CVE-2026-77884

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server …

CVE-2026-108070

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to …

CVE-2025-22369

The ReadFile endpoint of the firmware for Mennekes Smart / Premium Chargingpoints can be abused to read arbitrary files from …

CVE-2024-48838