Remote Service Exploit in Dell Storage Manager Software for Windows
CVE-2017-14374
9.8CRITICAL
Key Information:
- Vendor
Dell
- Vendor
- CVE Published:
- 6 December 2017
What is CVE-2017-14374?
The SMI-S service in Dell Storage Manager for Windows contains a significant security flaw due to a hard-coded password that protects the service. An attacker with knowledge of this password could send crafted HTTP requests to disable the SMI-S service, compromising the storage management and monitoring capabilities offered by the SMI-S interface. This vulnerability exclusively impacts versions of Dell Storage Manager prior to 16.3.20, specifically in Windows installations, and does not affect virtual appliance configurations.
Affected Version(s)
Dell Storage Manager 2016 Dell Storage Manager earlier than 16.3.20 Dell Storage Manager 2016 Dell Storage Manager versions earlier than 16.3.20