CVE-2025-45378

critical · 9.1

Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials of server, attack is possible through network with known privileged user/password.

9.1

CVSS

0.4%

EPSS (exploit prob.)

29th

EPSS percentile

2025-11-05

Published

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
dell	cloudlink	>= 8.0, <= 8.1.2

Check a specific version with /api/v1/cve/match.

References

https://www.dell.com/support/kbdoc/en-us/000384363/dsa-2025-374-security-update-for-dell-cloudlink-multiple-security-vulnerabilities

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-45378