CVE-2017-14374
Critical
Description
The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface. This issue, aka DSM-30415, only affects a Windows installation of the Data Collector (not applicable to the virtual appliance).
SeverityCritical
CVSS9.8
Exploit probability—
ProductDell Storage Manager
PublishedDec 6, 2017
First seenDec 6, 2017
How to fix
Update
- dell storage_manager16.3.20 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell storage_manager | v < 16.3.20 | 16.3.20 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.