DSA-2023-283: Security Update for Dell SmartFabric Storage Software Vulnerabilities
Summary: Dell SmartFabric Storage Software remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Critical
Details
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32485 | Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges up to the highest administration level. This is a critical severity vulnerability affecting user authentication. Dell recommends customers to upgrade at the earliest opportunity. | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
|---|---|---|---|
| CVE-2023-32485 | Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges up to the highest administration level. This is a critical severity vulnerability affecting user authentication. Dell recommends customers to upgrade at the earliest opportunity. | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected Products & Remediation
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2023-32485 | Dell SmartFabric Storage Software | Versions before 1.4.0 | 1.4.0 | https://www.dell.com/support |
| CVEs Addressed | Product | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|
| CVE-2023-32485 | Dell SmartFabric Storage Software | Versions before 1.4.0 | 1.4.0 | https://www.dell.com/support |
Workarounds & Mitigations
none
Revision History
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2023-08-08 | Initial Release |
| 2.0 | 2023-10-05 | Major Revision: added relevant URL to the CVEand modified minor formatting without content change. |
Related Information
Legal Disclaimer
Affected Products
SmartFabric Storage Software for NVMe/TCP SAN, SmartFabric Storage Software Download for NVMe/TCP SANArticle Properties
Article Number: 000216587
Article Type: Dell Security Advisory
Last Modified: 05 Oct 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.