Vulnerability Description
In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impacted by a reflected cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to execute arbitrary HTML code in the user's browser session in the context of the affected web application.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Vnx2 Firmware | < 8.1.9.217 |
| Dell | Emc Vnx2 | - |
| Dell | Emc Vnx1 Firmware | < 7.1.80.8 |
| Dell | Emc Vnx1 | - |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2017/Dec/87Mailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2017/Dec/87Mailing ListThird Party Advisory
FAQ
What is CVE-2017-14383?
CVE-2017-14383 is a vulnerability with a CVSS score of 6.1 (MEDIUM). In Dell EMC VNX2 versions prior to Operating Environment for File 8.1.9.217 and VNX1 versions prior to Operating Environment for File 7.1.80.8, a web server error page in VNX Control Station is impact...
How severe is CVE-2017-14383?
CVE-2017-14383 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-14383?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Vnx2 Firmware, Dell Emc Vnx2, Dell Emc Vnx1 Firmware, Dell Emc Vnx1.