Vulnerability record · CVE-2017-14384 · published 16 March 2018
CVE-2017-14384: Dell storage manager path traversal vulnerability
Dell · Storage Manager
In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of the application. A malicious user cannot delete or modify any files via this vulnerability.
Description
In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious user could potentially exploit this vulnerability to read unauthorized files by supplying specially crafted strings in input parameters of the application. A malicious user cannot delete or modify any files via this vulnerability.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf | Vendor Advisory |
| http://www.securityfocus.com/bid/103467 | Third Party AdvisoryVDB Entry |
| http://topics-cdn.dell.com/pdf/storage-sc2000_release%20notes24_en-us.pdf | Vendor Advisory |
| http://www.securityfocus.com/bid/103467 | Third Party AdvisoryVDB Entry |
Track CVE-2017-14384 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2017-14384), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
