CVE-2017-14374

Critical

Published: 06/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 is protected using a hard-coded password. A remote user with knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface.

Risk Assessment

The risk to the organization is the potential for remote disabling of the storage management service, which could lead to disruptions in data monitoring and management.

Recommendation

It is recommended to update Dell Storage Manager to version 16.3.20 or later to remove the hard-coded password and secure the SMI-S service.

Original NVD description (English source)

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface. This issue, aka DSM-30415, only affects a Windows installation of the Data Collector (not applicable to the virtual appliance).