Dell Smartfabric Storage Software vulnerabilities

10 CVEs affecting Dell Smartfabric Storage Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-35070, published 2026-05-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-31232, published 2022-08-30. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access and perform actions…
CVE-2023-43068, published 2023-10-05. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the restricted shell in SSH. An authenticated remote attacker could potentially exploit this…
CVE-2023-32485, published 2023-10-05. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exploit this vulnerability and escalate privileges…
CVE-2023-4401, published 2023-10-05. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Dell SmartFabric Storage Software v1.4 (and earlier) contains an OS Command Injection Vulnerability in the CLI use of the ‘more’ command. A local or remote authenticated attacker could potentially…
CVE-2023-43070, published 2023-10-05. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Dell SmartFabric Storage Software v1.4 (and earlier) contains a Path Traversal Vulnerability in the HTTP interface. A remote authenticated attacker could potentially exploit this vulnerability,…
CVE-2023-43073, published 2023-10-05. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this…
CVE-2023-43069, published 2023-10-05. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell SmartFabric Storage Software v1.4 (and earlier) contain(s) an OS Command Injection Vulnerability in the CLI. An authenticated local attacker could potentially exploit this vulnerability,…
CVE-2026-35070, published 2026-05-20. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. Dell SmartFabric Storage Software, versions prior to 1.4.5, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A high privileged attacker…
CVE-2023-43071, published 2023-10-05. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Dell SmartFabric Storage Software v1.4 (and earlier) contains possible vulnerabilities for HTML injection or CVS formula injection which might escalate to cross-site scripting attacks in HTML pages…
CVE-2023-43072, published 2023-10-05. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell SmartFabric Storage Software v1.4 (and earlier) contains an improper access control vulnerability in the CLI. A local possibly unauthenticated attacker could potentially exploit this…