RCE in Dell Smartfabric Storage Software

CVE-2023-43069

Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI. An authenticated local attacker could potentially exploit this vulnerability, leading to possible injection of parameters to…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.005 (37.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2023-43069?
CVE-2023-43069 is a high-severity vulnerability in Dell Smartfabric Storage Software, classified under OS Command Injection. CVSS score: 7.8/10. Published 2023-10-05.
How severe is CVE-2023-43069?
High severity. CVSS v3 base score is 7.8 out of 10.