Lucene search
DellCVELIST:CVE-2023-25934HistoryMay 04, 2023 - 6:58 a.m.
CVE-2023-25934
2023-05-0406:58:21
CWE-347
dell
www.cve.org
8
vulnerability
network attacker
interception
request modification
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
19.4%
DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability. A network attacker with an ability to intercept the request could potentially exploit this vulnerability to modify the body data of the request.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "ECS",
"vendor": "Dell",
"versions": [
{
"status": "affected",
"version": "Version<= 3.8.0.1"
}
]
}
]Related
prion
prion
Input validation
2023-05-04 07:15:00
nvd
nvd
CVE-2023-25934
2023-05-04 07:15:22
cnvd
cnvd
Dell EMC ECS Encryption Issues Vulnerability
2023-05-11 00:00:00
cve
cve
CVE-2023-25934
2023-05-04 07:15:22
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
19.4%
Related for CVELIST:CVE-2023-25934