CVE-2023-32464

Published: Jun 23, 2023Modified: Nov 21, 2024

3.3

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N

Exploitability: 0.7 / Impact: 2.5

Source: NVD

Description

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.

Affected (45)

Dell

45 products

Vxrail D560 Firmware

Vxrail D560f Firmware

Vxrail E460 Firmware

Vxrail E560 Firmware

Vxrail E560 Vcf Firmware

Vxrail E560f Firmware

Vxrail E560f Vcf Firmware

Vxrail E560n Firmware

Vxrail E560n Vcf Firmware

Vxrail E660 Firmware

Vxrail E660f Firmware

Vxrail E660n Firmware

Vxrail E665 Firmware

Vxrail E665f Firmware

Vxrail E665n Firmware

Vxrail G560 Firmware

Vxrail G560 Vcf Firmware

Vxrail G560f Firmware

Vxrail G560f Vcf Firmware

Vxrail P470 Firmware

Vxrail P570 Firmware

Vxrail P570 Vcf Firmware

Vxrail P570f Firmware

Vxrail P570f Vcf Firmware

Vxrail P580n Firmware

Vxrail P580n Vcf Firmware

Vxrail P670f Firmware

Vxrail P670n Firmware

Vxrail P675f Firmware

Vxrail P675n Firmware

Vxrail S470 Firmware

Vxrail S570 Firmware

Vxrail S570 Vcf Firmware

Vxrail S670 Firmware

Vxrail V470 Firmware

Vxrail V570 Firmware

Vxrail V570 Vcf Firmware

Vxrail V570f Firmware

Vxrail V570f Vcf Firmware

Vxrail V670f Firmware

Vxrail Vd 4000r Firmware

Vxrail Vd 4000w Firmware

Vxrail Vd 4000z Firmware

Vxrail Vd 4510c Firmware

Vxrail Vd 4520c Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail D560 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail D560	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail D560f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail D560f	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E460 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E460	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E560 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E560	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E560 Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E560 Vcf	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E560f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E560f	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E560f Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E560f Vcf	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E560n Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E560n	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E560n Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E560n Vcf	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E660 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E660	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E660f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E660f	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E660n Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E660n	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E665 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E665	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E665f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E665f	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail E665n Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail E665n	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail G560 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail G560	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail G560 Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail G560 Vcf	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail G560f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail G560f	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail G560f Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail G560f Vcf	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P470 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P470	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P570 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P570	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P570 Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P570 Vcf	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P570f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P570f	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P570f Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P570f Vcf	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P580n Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P580n	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P580n Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P580n Vcf	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P670f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P670f	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P670n Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P670n	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P675f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P675f	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail P675n Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail P675n	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail S470 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail S470	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail S570 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail S570	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail S570 Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail S570 Vcf	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail S670 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail S670	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail V470 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail V470	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail V570 Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail V570	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail V570 Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail V570 Vcf	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail V570f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail V570f	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail V570f Vcf Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail V570f Vcf	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail V670f Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail V670f	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail Vd 4000r Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail Vd 4000r	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail Vd 4000w Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail Vd 4000w	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail Vd 4000z Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail Vd 4000z	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail Vd 4510c Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail Vd 4510c	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Vxrail Vd 4520c Firmware	From 7.0.0 to 7.0.450

Running on/with	Platform Versions
Dell Vxrail Vd 4520c	All versions

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.