Dell SmartFabric Storage Software vulnerabilities
5 known vulnerabilities in Dell SmartFabric Storage Software from Dell. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation…
Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges up to the highest administration level. This is a critical seve
- 8.8 High severity
Dell SmartFabric Storage Software: Improper Neutralization of Special Elements used in an OS Command
Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root
- 7.8 High severity
Dell SmartFabric Storage Software: Improper Access Control
Dell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control vulnerability in the CLI. A local possibly unauthenticated attacker could potentially exploit this vulnerability, leading to ability to execute arbritrary shell commands.
- 7.8 High severity
Dell SmartFabric Storage Software: Improper Neutralization of Special Elements used in an OS Command
Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI. An authenticated local attacker could potentially exploit this vulnerability, leading to possible injection of parameters to curl or docker.
- 8.8 High severity
Dell SmartFabric Storage Software: Improper Neutralization of Special Elements used in an OS Command
Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted shell in SSH. An authenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary commands.