PT-2023-23807 · Dell · Dell Vxrail

Published 2023-06-23 · Updated 2023-07-05 · CVE-2023-32464

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Dell VxRail versions prior to 7.0.450

Description The issue concerns an improper certificate validation, which could be exploited by a high privileged remote attacker to carry out a man-in-the-middle attack. This attack involves supplying a crafted certificate to intercept the victim's traffic, allowing the attacker to view or modify the victim's data in transit.

Recommendations For versions prior to 7.0.450, update to version 7.0.450 or later to resolve the issue.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2023-32464

Affected Products

Dell Vxrail

References · 4

• https://osv.dev/vulnerability/CVE-2023-32464 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32464 · Security Note
• https://t.me/cvenotify/52931 · Telegram Post