CVE-2023-32485 — Dell / Dell SmartFabric Storage Software

Description (CNA)

Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges up to the highest administration level. This is a critical severity vulnerability affecting user authentication. Dell recommends customers to upgrade at the earliest opportunity.

Affected (CNA)

Vendor / product	Versions
Dell / Dell SmartFabric Storage Software	affected Versions before 1.4.0

CWE

CWE-20

References

https://www.dell.com/support/kbdoc/en-us/000216587/dsa-2023-283-security-update-for-dell-smartfabric-storage-software-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000216587/dsa-2023-283-security-update-for-dell-smartfabric-storage-software-vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.