CVEvulnerability

CVE-2023-32464

3.3 LOW Published 2023-06-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
3.3 LOW — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N
Weaknesses
CWE-295

Description

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.

Affected configurations

• dell vxrail d560 firmware (>= 7.0.0 < 7.0.450) • dell vxrail d560f firmware (>= 7.0.0 < 7.0.450) • dell vxrail e460 firmware (>= 7.0.0 < 7.0.450) • dell vxrail e560 firmware (>= 7.0.0 < 7.0.450) • dell vxrail e560 vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail e560f firmware (>= 7.0.0 < 7.0.450) • dell vxrail e560f vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail e560n firmware (>= 7.0.0 < 7.0.450) • dell vxrail e560n vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail e660 firmware (>= 7.0.0 < 7.0.450) • dell vxrail e660f firmware (>= 7.0.0 < 7.0.450) • dell vxrail e660n firmware (>= 7.0.0 < 7.0.450) • dell vxrail e665 firmware (>= 7.0.0 < 7.0.450) • dell vxrail e665f firmware (>= 7.0.0 < 7.0.450) • dell vxrail e665n firmware (>= 7.0.0 < 7.0.450) • dell vxrail g560 firmware (>= 7.0.0 < 7.0.450) • dell vxrail g560 vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail g560f firmware (>= 7.0.0 < 7.0.450) • dell vxrail g560f vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail p470 firmware (>= 7.0.0 < 7.0.450) • dell vxrail p570 firmware (>= 7.0.0 < 7.0.450) • dell vxrail p570 vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail p570f firmware (>= 7.0.0 < 7.0.450) • dell vxrail p570f vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail p580n firmware (>= 7.0.0 < 7.0.450) • dell vxrail p580n vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail p670f firmware (>= 7.0.0 < 7.0.450) • dell vxrail p670n firmware (>= 7.0.0 < 7.0.450) • dell vxrail p675f firmware (>= 7.0.0 < 7.0.450) • dell vxrail p675n firmware (>= 7.0.0 < 7.0.450) • dell vxrail s470 firmware (>= 7.0.0 < 7.0.450) • dell vxrail s570 firmware (>= 7.0.0 < 7.0.450) • dell vxrail s570 vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail s670 firmware (>= 7.0.0 < 7.0.450) • dell vxrail v470 firmware (>= 7.0.0 < 7.0.450) • dell vxrail v570 firmware (>= 7.0.0 < 7.0.450) • dell vxrail v570 vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail v570f firmware (>= 7.0.0 < 7.0.450) • dell vxrail v570f vcf firmware (>= 7.0.0 < 7.0.450) • dell vxrail v670f firmware (>= 7.0.0 < 7.0.450) • dell vxrail vd-4000r firmware (>= 7.0.0 < 7.0.450) • dell vxrail vd-4000w firmware (>= 7.0.0 < 7.0.450) • dell vxrail vd-4000z firmware (>= 7.0.0 < 7.0.450) • dell vxrail vd-4510c firmware (>= 7.0.0 < 7.0.450) • dell vxrail vd-4520c firmware (>= 7.0.0 < 7.0.450)

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References