CVE-2023-32464
Low
Description
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
SeverityLow
CVSS2.7
Exploit probability16. percentile0.2%
ProductDell Vxrail D560 Firmware
PublishedJun 23, 2023
First seenJun 23, 2023
Weakness typeCWE-295CWE-295
How to fix
Update
- dell vxrail_d560_firmware7.0.450 or later
- dell vxrail_d560f_firmware7.0.450 or later
- dell vxrail_e460_firmware7.0.450 or later
- dell vxrail_e560_firmware7.0.450 or later
- dell vxrail_e560_vcf_firmware7.0.450 or later
- dell vxrail_e560f_firmware7.0.450 or later
- dell vxrail_e560f_vcf_firmware7.0.450 or later
- dell vxrail_e560n_firmware7.0.450 or later
- dell vxrail_e560n_vcf_firmware7.0.450 or later
- dell vxrail_e660_firmware7.0.450 or later
- dell vxrail_e660f_firmware7.0.450 or later
- dell vxrail_e660n_firmware7.0.450 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell vxrail_d560_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_d560f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e460_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e560_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e560_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e560f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e560f_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e560n_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e560n_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e660_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e660f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e660n_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e665_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e665f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_e665n_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_g560_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_g560_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_g560f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_g560f_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p470_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p570_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p570_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p570f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p570f_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p580n_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p580n_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p670f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p670n_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p675f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_p675n_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_s470_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_s570_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_s570_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_s670_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_v470_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_v570_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_v570_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_v570f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_v570f_vcf_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_v670f_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_vd-4000r_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_vd-4000w_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_vd-4000z_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_vd-4510c_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
| dell vxrail_vd-4520c_firmware | 7.0.0 ≤ v < 7.0.450 | 7.0.450 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.