Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Advisory: Dell SmartFabric Storage Software — dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-sm… Clear all filters
TI-2023-23079 CVE-2023-43073 · GHSA-chqm-6gwv-pwhf

Improper input validation in Dell SmartFabric Storage Software

Priority LOW 30

Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0059 Published 2023-10-05 No fix listed CWE-20
TI-2023-23078 CVE-2023-43072 · GHSA-2wx4-jmwh-g7cc

Improper access control in Dell SmartFabric Storage Software

Priority LOW 33

Dell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control vulnerability in the CLI.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00163 Published 2023-10-05 No fix listed CWE-284
TI-2023-23077 CVE-2023-43071 · GHSA-p3vw-gp9c-j53c

CSV injection in Dell SmartFabric Storage Software

Priority LOW 25

Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML injection or CVS formula injection which might escalate to cross-site scripting attacks in HTML pages in the GUI.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00382 Published 2023-10-05 No fix listed CWE-1236
TI-2023-23076 CVE-2023-43070 · GHSA-w942-69h2-4pj6

Path traversal in Dell SmartFabric Storage Software

Priority LOW 30

Dell SmartFabric Storage Software v1.4 (and earlier) contains a Path Traversal Vulnerability in the HTTP interface.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0061 Published 2023-10-05 No fix listed CWE-22
TI-2023-23075 CVE-2023-43069 · GHSA-vqhv-rjvc-9qjp

OS command injection in Dell SmartFabric Storage Software

Priority LOW 37

Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00487 Published 2023-10-05 No fix listed CWE-78
TI-2023-23074 CVE-2023-43068 · GHSA-2x6r-x73c-jxgw

OS command injection in Dell SmartFabric Storage Software

Priority MEDIUM 42

Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted shell in SSH.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00944 Published 2023-10-05 No fix listed CWE-78
TI-2023-04065 CVE-2023-4401 · GHSA-cx7h-38cq-jvgj

Command injection in Dell SmartFabric Storage Software

Priority MEDIUM 42

Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00841 Published 2023-10-05 No fix listed CWE-77