What is CVE-2023-43068?

CVE-2023-43068 is a high-severity vulnerability in Dell Smartfabric Storage Software, classified under OS Command Injection. CVSS score: 7.8/10. Published 2023-10-05.

How severe is CVE-2023-43068?

High severity. CVSS v3 base score is 7.8 out of 10.

RCE in Dell Smartfabric Storage Software

CVE-2023-43068

Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted shell in SSH. An authenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrar…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.008 (51.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Smartfabric Storage Software — versions v1.4.0 and prior
Dell Smartfabric_storage_software

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-43068?: CVE-2023-43068 is a high-severity vulnerability in Dell Smartfabric Storage Software, classified under OS Command Injection. CVSS score: 7.8/10. Published 2023-10-05.
How severe is CVE-2023-43068?: High severity. CVSS v3 base score is 7.8 out of 10.