OS Command Injection Vulnerability in Dell SmartFabric Storage Software

CVE-2023-4401

What is CVE-2023-4401?

Dell SmartFabric Storage Software versions 1.4 and earlier are affected by an OS command injection vulnerability in the command-line interface (CLI) usage of the 'more' command. An authenticated attacker—either local or remote—may leverage this vulnerability to execute arbitrary commands on the underlying operating system, potentially gaining root privileges and compromising the integrity and security of the affected system. It's crucial for users to apply security updates to mitigate this risk and protect their data.

References