The vulnerability is an improper neutralization of special elements used in a command, which allows a high‑privileged local attacker to inject and execute arbitrary commands. This can result in unauthorized file system access, compromising confidentiality, integrity, and potentially availability of the affected system.

Dell SmartFabric Storage Software versions earlier than 1.4.5 are affected. Customers running those versions will be able to exploit the vulnerability if they gain local privileged access.

The CVSS score of 6.4 indicates a moderate severity. EPSS is not available, so exploitation likelihood cannot be quantified, but the vulnerability requires local privileged access and is not listed in the CISA KEV catalog. The likely attack vector is a local attacker who already has administrative privileges. Without the necessary local privileges, remote exploitation is not possible.