vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2017-14374

N/A
Published: December 6, 2017 at 12:00 AM UTC
Updated: June 17, 2026 at 01:06 AM UTC
1 product affected across 1 vendorStorage Manager

Using Dell Storage Manager 2016 Dell Storage Manager versions earlier than 16.3.20 by N/A?

Get instant alerts when new vulnerabilities affect Dell Storage Manager 2016 Dell Storage Manager versions earlier than 16.3.20 - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 1%

Description

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface. This issue, aka DSM-30415, only affects a Windows installation of the Data Collector (not applicable to the virtual appliance).

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Storage Manager· Dell
95%
v < 16.3.20
Affected range stops below 16.3.20, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

x_refsource_CONFIRMRelease NotesVendor Advisory
Source: [email protected]
http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf

CVSS

7.5HIGH[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-798

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card