CVE-2026-35070: Improper Neutralization of Special Elements used in a Command

Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for...

EUVD-2023-47491

Malicious code in bioql PyPI...

Dell SmartFabric Storage Software HTML Injection Vulnerability

Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. Dell SmartFabric Storage Software version 1.4 suffers from an HTML injection vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...

CVE-2023-43072

Dell SmartFabric Storage Software v1.4 and earlier contains an improper access control vulnerability in the CLI. A local possibly unauthenticated attacker could potentially exploit this vulnerability, leading to ability to execute arbritrary shell commands...

CVE-2023-43069: Improper Neutralization of Special Elements used in an OS Command

Dell SmartFabric Storage Software v1.4 and earlier contains an OS Command Injection Vulnerability in the CLI. An authenticated local attacker could potentially exploit this vulnerability, leading to possible injection of parameters to curl or docker...

PT-2023-6504

Name of the Vulnerable Software and Affected Versions Dell SmartFabric Storage Software versions 1.4 and earlier Description The issue is related to insufficient checking of arguments passed to a command, which could allow a remote attacker to execute arbitrary commands. An authenticated remote...

PT-2023-28683

Name of the Vulnerable Software and Affected Versions Dell SmartFabric Storage Software versions 1.4 and earlier Description The issue is related to an Improper Input Validation vulnerability in the RADIUS configuration of the software. This could allow an authenticated remote attacker to gain...

CVE-2023-43073: Improper Input Validation

Dell SmartFabric Storage Software v1.4 and earlier contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this vulnerability, leading to gaining unauthorized access to data...

CVE-2023-43068: Improper Neutralization of Special Elements used in an OS Command

Dell SmartFabric Storage Software v1.4 and earlier contains an OS Command Injection Vulnerability in the restricted shell in SSH. An authenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary commands...

CVE-2023-43072: Improper Access Control

Dell SmartFabric Storage Software v1.4 and earlier contains an improper access control vulnerability in the CLI. A local possibly unauthenticated attacker could potentially exploit this vulnerability, leading to ability to execute arbritrary shell commands...

CVE-2023-32485: Improper Input Validation

Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges up to the highest administration level. This is a critical severity vulnerability affecting user...

CVE-2023-43070: Improper Limitation of a Pathname to a Restricted Directory

Dell SmartFabric Storage Software v1.4 and earlier contains a Path Traversal Vulnerability in the HTTP interface. A remote authenticated attacker could potentially exploit this vulnerability, leading to modify or write arbitrary files to arbitrary locations in the license container...

PT-2023-28680

Name of the Vulnerable Software and Affected Versions Dell SmartFabric Storage Software versions 1.4 and earlier Description The issue is related to a Path Traversal Vulnerability in the HTTP interface, allowing a remote authenticated attacker to potentially modify or write arbitrary files to...

CVE-2023-4401: Improper Neutralization of Special Elements used in a Command

Dell SmartFabric Storage Software v1.4 and earlier contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access...

CVE-2023-43071: Improper Neutralization of Formula Elements in a CSV File

Dell SmartFabric Storage Software v1.4 and earlier contains possible vulnerabilities for HTML injection or CVS formula injection which might escalate to cross-site scripting attacks in HTML pages in the GUI. A remote authenticated attacker could potentially exploit these issues, leading to variou...