What is the CVSS score of CVE-2023-32464?

CVE-2023-32464 has a CVSS 3.1 base score of 3.3 (Low). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N. EPSS exploitation probability: 0.2%.

Vxrail D560 Firmware CVE-2023-32464

LOW

Improper Certificate Validation (CWE-295)

2023-06-23 security_alert@emc.com

Information Disclosure Dell Vxrail D560 Firmware Vxrail D560F Firmware Vxrail E460 Firmware Vxrail E560 Firmware Vxrail E560 Vcf Firmware Vxrail E560F Firmware Vxrail E560F Vcf Firmware Vxrail E560N Firmware Vxrail E560N Vcf Firmware Vxrail E660 Firmware Vxrail E660F Firmware Vxrail E660N Firmware Vxrail E665 Firmware Vxrail E665F Firmware Vxrail E665N Firmware Vxrail G560 Firmware Vxrail G560 Vcf Firmware Vxrail G560F Firmware Vxrail G560F Vcf Firmware Vxrail P470 Firmware Vxrail P570 Firmware Vxrail P570 Vcf Firmware Vxrail P570F Firmware Vxrail P570F Vcf Firmware Vxrail P580N Firmware Vxrail P580N Vcf Firmware Vxrail P670F Firmware Vxrail P670N Firmware Vxrail P675F Firmware Vxrail P675N Firmware Vxrail S470 Firmware Vxrail S570 Firmware Vxrail S570 Vcf Firmware Vxrail S670 Firmware Vxrail V470 Firmware Vxrail V570 Firmware Vxrail V570 Vcf Firmware Vxrail V570F Firmware Vxrail V570F Vcf Firmware Vxrail V670F Firmware Vxrail Vd 4000R Firmware Vxrail Vd 4000W Firmware Vxrail Vd 4000Z Firmware Vxrail Vd 4510C Firmware Vxrail Vd 4520C Firmware

3.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Jun 23, 2023 - 08:15 nvd

LOW 3.3

DescriptionNVD

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.

AnalysisAI

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. Rated low severity (CVSS 3.3), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-295. Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit. Affected products include: Dell Vxrail D560 Firmware, Dell Vxrail D560F Firmware, Dell Vxrail E460 Firmware, Dell Vxrail E560 Firmware, Dell Vxrail E560 Vcf Firmware. Version information: prior to 7.0.450.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.