Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-77953
HistorySep 01, 2022 - 12:00 a.m.

Dell SmartFabric storage software command injection vulnerability

2022-09-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
dell smartfabric
storage software
command injection
vulnerability
version 1.0.0
network system
arbitrary command execution
cnvd

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

69.2%

Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell (USA). A command injection vulnerability exists in Dell SmartFabric storage software version 1.0.0, which arises from a failure of a network system or product to properly filter special characters, commands, etc., when a user enters a constructed command for execution. An attacker could exploit the vulnerability to cause arbitrary command execution.

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

69.2%

Related for CNVD-2023-77953