RCE in Dell Smartfabric Storage Software
CVE-2023-43069
Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI. An authenticated local attacker could potentially exploit this vulnerability, leading to possible injection of parameters to…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.005 (37.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Dell Smartfabric Storage Software — versions v1.4.0 and prior
- Dell Smartfabric_storage_software
Weakness classification (CWE)
References
- security_alert@emc.com (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-43069?
- CVE-2023-43069 is a high-severity vulnerability in Dell Smartfabric Storage Software, classified under OS Command Injection. CVSS score: 7.8/10. Published 2023-10-05.
- How severe is CVE-2023-43069?
- High severity. CVSS v3 base score is 7.8 out of 10.