CVE-2023-32464
23.06.2023, 08:15
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victims data in transit.Enginsight
| Vendor | Product | Version |
|---|---|---|
| dell | vxrail_d560_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_d560f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e460_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e560_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e560_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e560f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e560f_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e560n_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e560n_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e660_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e660f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e660n_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e665_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e665f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_e665n_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_g560_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_g560_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_g560f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_g560f_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p470_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p570_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p570_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p570f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p570f_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p580n_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p580n_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p670f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p670n_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p675f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_p675n_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_s470_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_s570_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_s570_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_s670_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_v470_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_v570_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_v570_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_v570f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_v570f_vcf_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_v670f_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_vd-4000r_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_vd-4000w_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_vd-4000z_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_vd-4510c_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
| dell | vxrail_vd-4520c_firmware | 7.0.0 ≤ 𝑥 < 7.0.450 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References