Headline
CVE-2023-32485: DSA-2023-283: Security Update for Dell SmartFabric Storage Software Vulnerabilities
Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges up to the highest administration level. This is a critical severity vulnerability affecting user authentication. Dell recommends customers to upgrade at the earliest opportunity.
Impact
Critical
Details
Proprietary Code CVEs
Description
CVSS Base Score
CVSS Vector String
CVE-2023-32485
Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges up to the highest administration level. This is a critical severity vulnerability affecting user authentication. Dell recommends customers to upgrade at the earliest opportunity.
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Proprietary Code CVEs
Description
CVSS Base Score
CVSS Vector String
CVE-2023-32485
Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges up to the highest administration level. This is a critical severity vulnerability affecting user authentication. Dell recommends customers to upgrade at the earliest opportunity.
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.
Affected Products and Remediation
CVEs Addressed
Product
Affected Versions
Remediated Versions
Link
CVE-2023-32485
Dell SmartFabric Storage Software
Versions before 1.4.0
1.4.0
https://www.dell.com/support
CVEs Addressed
Product
Affected Versions
Remediated Versions
Link
CVE-2023-32485
Dell SmartFabric Storage Software
Versions before 1.4.0
1.4.0
https://www.dell.com/support
Workarounds and Mitigations
none
Revision History
Revision
Date
Description
1.0
2023-08-08
Initial Release
2.0
2023-10-05
Major Revision: added relevant URL to the CVEand modified minor formatting without content change.
Related Information
Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide
SmartFabric Storage Software for NVMe/TCP SAN, SmartFabric Storage Software Download for NVMe/TCP SAN