7.8
High
CVE-2023-4401 Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of…
Description
Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dell SmartFabric Storage Software | Versions not published |
Other CVEs of Dell SmartFabric Storage Software
The 8 CVEs of Dell SmartFabric Storage Software →
CVE-2023-32485
Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability
9.8
Critical
CVE-2023-43073
Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS…
4.3
Medium
CVE-2023-43072
Dell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control vulnerability in the CLI
4.4
Medium
CVE-2023-43071
Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML injection or CVS formula…
4.4
Medium