CVE-2024-39585 Hardcoded credentials in SmartFabric OS10 Software
A low-privileged remote attacker can exploit hard-coded credentials in Dell SmartFabric OS10 to cause client-side request forgery and disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-39585?
CVE-2024-39585 is a high-severity vulnerability in Dell SmartFabric OS10 Software, published on 6 Sep 2024. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an Use of Hard-coded Password vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Client-side request forgery and Information disclosure.
Which versions are affected by CVE-2024-39585?
It affects 1 product.
Products include Dell Smartfabric Os10.
How do I fix CVE-2024-39585?
No fix has been published for CVE-2024-39585 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-39585 being exploited?
There is no known exploitation of CVE-2024-39585 in the wild and no public exploit code.
Other vulnerabilities in Dell SmartFabric OS10 Software
- CVE-2023-32462 Command injection in Dell SmartFabric OS10
- CVE-2023-28078 Information disclosure in Dell SmartFabric OS10
- CVE-2025-46427 Command injection in SmartFabric OS10 Software
- CVE-2025-46428 Command injection in SmartFabric OS10 Software
- CVE-2024-48013 Privilege escalation in SmartFabric OS10 Software
Sources
Also known as GHSA-48wc-9j2c-rwp5.