{"id":"CVE-2023-43073","aliases":["EUVD-2023-47494","GHSA-chqm-6gwv-pwhf"],"status":"published","title":"Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation...","description":"Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this vulnerability, leading to gaining unauthorized access to data.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0059,"percentile":0.48478,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2023-10-05T17:52:25Z","modified":"2026-06-17T06:25:03Z","products":[{"vendor":"dell","product":"dell smartfabric storage software"},{"vendor":"dell","product":"smartfabric_storage_software"}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000218107/dsa-2023-347-dell-smartfabric-storage-software-security-update-for-multiple-vulnerabilities","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43073"},{"url":"https://github.com/advisories/GHSA-chqm-6gwv-pwhf"}],"sources":{"cve":[{"id":"CVE-2023-43073","description":"\nDell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this vulnerability, leading to gaining unauthorized access to data.\n\n","status":"published","published":"2023-10-05T17:52:25.891Z","modified":"2024-09-19T18:19:10.183Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:14.633899Z"}],"euvd":[{"id":"EUVD-2023-47494","description":"\nDell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this vulnerability, leading to gaining unauthorized access to data.\n\n","status":"published","published":"2023-10-05T17:52:25Z","modified":"2024-09-19T18:19:10Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:28:18.665654Z"}],"ghsa":[{"id":"GHSA-chqm-6gwv-pwhf","title":"\nDell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation...","description":"\nDell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this vulnerability, leading to gaining unauthorized access to data.\n\n","status":"published","published":"2023-10-05T18:31:34Z","modified":"2024-04-04T08:20:25Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:56:58.07957Z"}],"nvd":[{"id":"CVE-2023-43073","description":"\nDell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated remote attacker could potentially exploit this vulnerability, leading to gaining unauthorized access to data.\n\n","status":"published","published":"2023-10-05T18:15:12.563Z","modified":"2026-06-17T06:25:03.953Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:08:35.022405Z"}]}}