Impact
Dell SmartFabric Manager has an Insufficient Verification of Data Authenticity flaw (CWE‑345). A low‑privileged attacker who can communicate with the manager via remote channels can manipulate or forge data sent to the system, potentially causing it to accept malicious inputs and elevate the attacker’s privileges within the management environment.
Affected Systems
Dell SmartFabric Manager versions earlier than 2.2.1 are affected. Only the Dell SmartFabric Manager product is listed; no additional vendors or product variants were identified.
Risk and Exploitability
The CVSS score of 8.1 indicates a high severity vulnerability. No EPSS score is available, so the current exploit probability is unknown, and the flaw has not been cataloged in CISA KEV. Based on the description, the likely attack vector is remote; a low‑privileged user with network reach to the manager could potentially exploit the weakness without additional access privileges.
OpenCVE Enrichment