Impact
The vulnerability allows a low‑privileged attacker with remote access to the Dell Disk Library for Mainframe to perform a server‑side request forgery. An attacker could trick the library into making unrestricted requests to internal resources, potentially exposing confidential information or facilitating further compromise.
Affected Systems
The vulnerability affects Dell Disk Library for Mainframe products DLm2700 and DLm8700. No specific firmware or software version numbers are listed beyond the product family; the public advisory recommends updating these mainframe disk libraries.
Risk and Exploitability
The CVSS score of 4.3 indicates low severity. The EPSS score is not available and the vulnerability is not currently listed in the CISA KEV catalog. The attack vector is remote; a low‑privileged user can trigger the SSRF. Exploitation does not require administrative privileges but requires network connectivity to the library.
OpenCVE Enrichment