PT-2018-5628 · Dell Emc · Dell Emc Vnx2+2

Published 2018-01-04 · Updated 2018-02-07 · CVE-2017-14383

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Dell EMC VNX2 versions prior to 8.1.9.217 Dell EMC VNX1 versions prior to 7.1.80.8

Description: A reflected cross-site scripting issue affects the web server error page in VNX Control Station. This could allow a remote unauthenticated attacker to execute arbitrary HTML code in the user's browser session.

Recommendations: For Dell EMC VNX2 versions prior to 8.1.9.217, update to Operating Environment for File 8.1.9.217 or later. For Dell EMC VNX1 versions prior to 7.1.80.8, update to Operating Environment for File 7.1.80.8 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-14383

Affected Products

Dell Emc Vnx1

Dell Emc Vnx2

Vnx Control Station

References · 3

• https://osv.dev/vulnerability/CVE-2017-14383 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14383 · Security Note
• http://seclists.org/fulldisclosure/2017/Dec/87 · Note