PT-2022-20628 · Unknown · Smartfabric Storage

Published 2022-08-30 · Updated 2022-09-08 · CVE-2022-31232

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SmartFabric storage software version 1.0.0

Description The issue is a Command-Injection vulnerability that could allow a remote unauthenticated attacker to gain access and perform actions on the affected system.

Recommendations For SmartFabric storage software version 1.0.0, consider disabling remote access until a patch is available to prevent potential exploitation of the Command-Injection vulnerability.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-31232

Affected Products

Smartfabric Storage

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-31232 · Security Note
• https://dell.com/support/kbdoc/en-us/000201667/dsa-2022-156-dell-emc-smartfabric-storage-software-security-update-for-multiple-component-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31232 · Vendor Advisory
• https://t.me/cvenotify/35477 · Telegram Post
• https://t.me/cvenotify/35841 · Telegram Post
• https://t.me/cibsecurity/49079 · Telegram Post