low3.4
CVE-2023-32463
Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality.
Impact
Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Vxrail D560 Firmware | before 8.0.100 |
| Dell | Vxrail D560f Firmware | before 8.0.100 |
| Dell | Vxrail E460 Firmware | before 8.0.100 |
| Dell | Vxrail E560 Firmware | before 8.0.100 |
| Dell | Vxrail E560 Vcf Firmware | before 8.0.100 |
| Dell | Vxrail E560f Firmware | before 8.0.100 |
| Dell | Vxrail E560f Vcf Firmware | before 8.0.100 |
| Dell | Vxrail E560n Firmware | before 8.0.100 |
| Dell | Vxrail E560n Vcf Firmware | before 8.0.100 |
| Dell | Vxrail E660 Firmware | before 8.0.100 |
| Dell | Vxrail E660f Firmware | before 8.0.100 |
| Dell | Vxrail E660n Firmware | before 8.0.100 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.dell.com/support/kbdoc/en-us/000214659/dsa-2023-200-security-update-for-dell-vxrail-for-multiple-third-party-component-vulnerabilities
- https://www.dell.com/support/kbdoc/en-us/000214659/dsa-2023-200-security-update-for-dell-vxrail-for-multiple-third-party-component-vulnerabilities