What is the CVSS score of CVE-2023-32463?

CVE-2023-32463 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.5%.

Vxrail D560 Firmware CVE-2023-32463

HIGH

Improper Input Validation (CWE-20)

2023-06-23 security_alert@emc.com

Information Disclosure Dell Vxrail D560 Firmware Vxrail D560F Firmware Vxrail E460 Firmware Vxrail E560 Firmware Vxrail E560 Vcf Firmware Vxrail E560F Firmware Vxrail E560F Vcf Firmware Vxrail E560N Firmware Vxrail E560N Vcf Firmware Vxrail E660 Firmware Vxrail E660F Firmware Vxrail E660N Firmware Vxrail E665 Firmware Vxrail E665F Firmware Vxrail E665N Firmware Vxrail G560 Firmware Vxrail G560 Vcf Firmware Vxrail G560F Firmware Vxrail G560F Vcf Firmware Vxrail P470 Firmware Vxrail P570 Firmware Vxrail P570 Vcf Firmware Vxrail P570F Firmware Vxrail P570F Vcf Firmware Vxrail P580N Firmware Vxrail P580N Vcf Firmware Vxrail P670F Firmware Vxrail P670N Firmware Vxrail P675F Firmware Vxrail P675N Firmware Vxrail S470 Firmware Vxrail S570 Firmware Vxrail S570 Vcf Firmware Vxrail S670 Firmware Vxrail V470 Firmware Vxrail V570 Firmware Vxrail V570 Vcf Firmware Vxrail V570F Firmware Vxrail V570F Vcf Firmware Vxrail V670F Firmware Vxrail Vd 4000R Firmware Vxrail Vd 4000W Firmware Vxrail Vd 4000Z Firmware Vxrail Vd 4510C Firmware Vxrail Vd 4520C Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Jun 23, 2023 - 08:15 nvd

HIGH 7.5

DescriptionNVD

Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction.

AnalysisAI

Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction. Affected products include: Dell Vxrail D560 Firmware, Dell Vxrail D560F Firmware, Dell Vxrail E460 Firmware, Dell Vxrail E560 Firmware, Dell Vxrail E560 Vcf Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.