CVE-2023-43068highCWE-78

CVE-2023-43068: high-severity vulnerability in Dell SmartFabric Storage Software

Published · Updated

Follow this CVE+ Monitor Dell SmartFabric Storage

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.9%
Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted shell in SSH. An authenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary commands.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Dell · Dell SmartFabric Storage Software
Related CVEs — Dell SmartFabric Storage Software

In the same product, most dangerous first.

CVE-2023-32485CRITICALCVE-2023-32485EPSS 0.9%CVE-2023-4401HIGHCVE-2023-4401EPSS 0.8%CVE-2023-43070MEDIUMCVE-2023-43070EPSS 0.6%CVE-2023-43073MEDIUMCVE-2023-43073EPSS 0.6%CVE-2023-43069HIGHCVE-2023-43069EPSS 0.5%CVE-2023-43071MEDIUMCVE-2023-43071EPSS 0.4%