CVE-2023-43068 — Dell / Dell SmartFabric Storage Software

Description (CNA)

Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted shell in SSH. An authenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary commands.

Affected (CNA)

Vendor / product	Versions
Dell / Dell SmartFabric Storage Software	affected v1.4.0 and prior

CWE

CWE-78

References

https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.