CVE-2023-32485 CRITICAL

CVE-2023-32485

Vendor Dell
Product Dell SmartFabric Storage Software
Weakness CWE-20 · Input validation
Published October 5, 2023
Last update September 19, 2024

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges up to the highest administration level. This is a critical severity vulnerability affecting user authentication. Dell recommends customers to upgrade at the earliest opportunity.

Key dates

02Disclosure timeline

October 5, 2023 CVE published
September 19, 2024 Record updated