CVE-2025-45379

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from…

High8.4EPSS 0.65%

Published: 5 Nov 2025
Updated: 3 Nov 2026
Reserved: 22 Apr 2025
Assigned by: dell

Description

Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.

Scores

CVSS scores of CVE-2025-45379, by who scored it
Scored by	CVSS	Score	Vector
dellCNA (assigner)	3.1	High8.4	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVDNVD · Analyzed	3.1	High8.4	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.65% · top 48% of all CVEs (6 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.4.

Weakness

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (opens in a new tab)All about CWE-78 and its CVEs

Affected products

Dell · CloudLink
- affected N/A – < 8.2

References (1)

https://www.dell.com/support/kbdoc/en-us/000384363/dsa-2025-374-security-update-for-dell-cloudlink-multiple-security-vulnerabilities (opens in a new tab)vendor-advisory

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2025-45379](https://trackcve.app/badge/CVE-2025-45379.svg)](https://trackcve.app/cve/CVE-2025-45379)

Record last updated 3 Nov 2026, 22:03 UTC.