Lucene search
+L

84 matches found

NVD
NVD
added 2023/06/23 8:15 a.m.22 views

CVE-2023-32463

Dell VxRail, versions 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction...

7.5CVSS5AI score0.00464EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/23 8:15 a.m.8 views

CVE-2023-32464

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view o...

3.3CVSS5.8AI score0.00249EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/23 8:15 a.m.25 views

Design/Logic Flaw

Dell VxRail, versions 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction...

5CVSS7.5AI score0.00464EPSS
SaveExploits0References1Affected Software45
Prion
Prion
added 2023/06/23 8:15 a.m.18 views

Input validation

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view o...

3.2CVSS3.9AI score0.00249EPSS
SaveExploits0References1Affected Software45
Vulnrichment
Vulnrichment
added 2023/06/23 7:57 a.m.13 views

CVE-2023-32464

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view o...

2.7CVSS6.5AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/23 7:57 a.m.47 views

CVE-2023-32464

Dell VxRail is affected up to version 7.0.450 due to improper certificate validation in trust management, enabling a high-privileged attacker to perform MITM by presenting crafted certificates and intercepting in-transit data. Root cause: faulty certificate validation in the product stack. Affect...

3.3CVSS3.9AI score0.00249EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/23 7:57 a.m.26 views

CVE-2023-32464

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view o...

2.7CVSS4AI score0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/06/23 7:51 a.m.19 views

CVE-2023-32463

Dell VxRail, versions 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction...

3.4CVSS7AI score0.00464EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/06/23 7:51 a.m.25 views

CVE-2023-32463

Dell VxRail, versions 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction...

3.4CVSS7.7AI score0.00464EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/23 7:51 a.m.50 views

CVE-2023-32463

Dell VxRail: CVE-2023-32463 affects versions 8.0.100 and earlier, with a denial-of-service flaw in the upgrade functionality that could be exploited remotely by an unauthenticated attacker to degrade performance or cause system malfunction. The principal affected component is the upgrade process;...

7.5CVSS7.5AI score0.00464EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/06/23 12:00 a.m.10 views

Dell VxRail 输入验证错误漏洞

Dell VxRail is Dell's single HCI platform for every VMware workload and use case, including VDI, compute-intensive applications, and for hosting legacy and modern applications on a true hybrid cloud infrastructure. An input validation error vulnerability exists in Dell VxRail 8.0.100 and prior...

7.5CVSS7.3AI score0.00464EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/06/23 12:00 a.m.13 views

Dell VxRail 信任管理问题漏洞

Dell VxRail is Dell's single HCI platform for every VMware workload and use case, including VDI, compute-intensive applications, and for hosting legacy and modern applications on a true hybrid cloud infrastructure. A trust management issue vulnerability exists in Dell VxRail 7.0.450 and prior...

3.3CVSS6.7AI score0.00249EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/23 12:00 a.m.9 views

PT-2023-23807 · Dell · Dell Vxrail

Name of the Vulnerable Software and Affected Versions: Dell VxRail versions prior to 7.0.450 Description: The issue concerns an improper certificate validation, which could be exploited by a high privileged remote attacker to carry out a man-in-the-middle attack. This attack involves supplying a...

3.3CVSS3.6AI score0.00249EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/06/23 12:00 a.m.10 views

PT-2023-23806 · Dell · Dell Vxrail

Name of the Vulnerable Software and Affected Versions: Dell VxRail versions 8.0.100 and earlier Description: The issue is a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance...

7.5CVSS7.3AI score0.00464EPSS
SaveExploits0References3
NVD
NVD
added 2023/05/23 7:15 a.m.19 views

CVE-2023-23693

Dell VxRail, versions prior to 7.0.450, contains an OS command injection Vulnerability in DCManager command-line utility. A local high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the...

8.2CVSS7.2AI score0.00378EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/23 7:15 a.m.5 views

CVE-2023-23693

Dell VxRail, versions prior to 7.0.450, contains an OS command injection Vulnerability in DCManager command-line utility. A local high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the...

8.2CVSS7.5AI score0.00378EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/23 7:15 a.m.22 views

CVE-2023-23694

Dell VxRail versions earlier than 7.0.450, contains an OS command injection vulnerability in VxRail Manager. A local authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of th...

7.8CVSS6AI score0.00726EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/23 7:15 a.m.9 views

CVE-2023-23694

Dell VxRail versions earlier than 7.0.450, contains an OS command injection vulnerability in VxRail Manager. A local authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of th...

7.8CVSS7.3AI score0.00726EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/23 7:15 a.m.22 views

Command injection

Dell VxRail versions earlier than 7.0.450, contains an OS command injection vulnerability in VxRail Manager. A local authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of th...

4.3CVSS7.8AI score0.00726EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/05/23 7:15 a.m.20 views

Command injection

Dell VxRail, versions prior to 7.0.450, contains an OS command injection Vulnerability in DCManager command-line utility. A local high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the...

4CVSS8.1AI score0.00378EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder