Lucene search
+L

6 matches found

NVD
NVD
•added 2023/10/05 6:15 p.m.•30 views

CVE-2023-4401

Dell SmartFabric Storage Software v1.4 and earlier contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access...

8.8CVSS8AI score0.00841EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/10/05 6:15 p.m.•22 views

CVE-2023-4401

Dell SmartFabric Storage Software v1.4 and earlier contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access...

8.8CVSS5.8AI score0.00841EPSS
SaveExploits0References1
Prion
Prion
•added 2023/10/05 6:15 p.m.•27 views

Command injection

Dell SmartFabric Storage Software v1.4 and earlier contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access...

6.5CVSS8.5AI score0.00841EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/10/05 5:12 p.m.•68 views

CVE-2023-4401

Dell SmartFabric Storage Software (Dell) vulnerability CVE-2023-4401: OS command injection in the CLI using the more command affects v1.4 and earlier, enabling root-level access for authenticated users (local/remote). Root cause: command injection via CLI command parsing. Impact: potential full s...

8.8CVSS8.5AI score0.00841EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/05 12:00 a.m.•8 views

CVE-2023-4401: Improper Neutralization of Special Elements used in a Command

Dell SmartFabric Storage Software v1.4 and earlier contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially exploit this vulnerability, leading to the ability to gain root-level access...

8.8CVSS7.9AI score0.00841EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2001/05/24 12:00 a.m.•7 views

CVE-2001-0406: Undefined Security Weakness

Samba before 2.2.0 allows local attackers to overwrite arbitrary files via a symlink attack using 1 a printer queue query, 2 the more command in smbclient, or 3 the mput command in smbclient...

2.1CVSS5.9AI score0.01139EPSS
SaveExploits1References1
Rows per page
Query Builder