CVE-2017-14374

State: Published
Severity: Not scored
Published: Dec 6, 2017
Updated: Aug 5, 2024
Reserved: Sep 12, 2017

Description

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface. This issue, aka DSM-30415, only affects a Windows installation of the Data Collector (not applicable to the virtual appliance).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Dell Storage Manager 2016 Dell Storage Manager versions earlier than 16.3.20n/a	Dell Storage Manager 2016 Dell Storage Manager versions earlier than 16.3.20Affected

References

http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.