CVE-2017-14374

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface. This issue, aka DSM-30415, only affects a Windows installation of the Data Collector (not applicable to the virtual appliance).

• CWE-798

• http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdfRelease Notes, Vendor Advisory
• http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdfRelease Notes, Vendor Advisory

Published

Dec 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14363Cross-Site Scripting (XSS) vulnerability has been identified…5.9
• CVE-2017-14369RSA Archer GRC Platform prior to 6.2.0.5 is affected by a pr…
• CVE-2017-14370RSA Archer GRC Platform prior to 6.2.0.5 is affected by stor…
• CVE-2017-14371RSA Archer GRC Platform prior to 6.2.0.5 is affected by refl…
• CVE-2017-14372RSA Archer GRC Platform prior to 6.2.0.5 is affected by refl…
• CVE-2017-14373EMC RSA Authentication Manager 8.2 SP1 P4 and earlier contai…
• CVE-2017-14375EMC Unisphere for VMAX Virtual Appliance (vApp) versions pri…
• CVE-2017-14376EMC AppSync Server prior to 3.5.0.1 contains database accoun…
• CVE-2017-14377EMC RSA Authentication Agent for Web: Apache Web Server vers…
• CVE-2017-14378EMC RSA Authentication Agent API 8.5 for C and RSA Authentic…
• CVE-2017-14379EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross…
• CVE-2017-1438IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.…