CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-4401

Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 61.4%

CVSS Severity

CVSS v3 Score 7.8

References

https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities
https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities

Products affected by CVE-2023-4401

Dell » Smartfabric Storage Software » Version: 1.0.0

cpe:2.3:a:dell:smartfabric_storage_software:1.0.0
Dell » Smartfabric Storage Software » Version: 1.4.0

cpe:2.3:a:dell:smartfabric_storage_software:1.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-4401

Products

Pricing

Contact Us