CVE-2017-14374

Name: CVE-2017-14374
Creator: NVD / NIST
Published: 2017-12-06T00:29:00.213+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 1.32%

Last modified Jun 17, 2026

CVE-2017-14374 is a vulnerability of currently unknown severity. The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface. EPSS estimates a 1.32% chance of exploitation in the next 30 days.

Description

The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password. A remote user with the knowledge of the password might potentially disable the SMI-S service via HTTP requests, affecting storage management and monitoring functionality via the SMI-S interface. This issue, aka DSM-30415, only affects a Windows installation of the Data Collector (not applicable to the virtual appliance).

Metrics

EPSS Probability

1.32%

67.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-798

Affected Software

Vendor	Product	Versions
Dell	Storage Manager	< 16.3.20

References

http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdfRelease Notes, Vendor Advisory
http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdfRelease Notes, Vendor Advisory

Timeline

Published: Dec 6, 2017
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2017-14374?

How severe is CVE-2017-14374?

Severity scoring for CVE-2017-14374 is pending analysis. The EPSS model estimates a 1.32% probability of exploitation in the next 30 days.

How do I fix CVE-2017-14374?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-14374?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST