What’s Vulnerable › Vulnerabilities

CVE-2023-32463

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-23 · updated 2026-06-17
• Weakness: CWE-20

Description

Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction.

Affected products

• Dell Vxrail D560 Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail D560F Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E460 Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E560 Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E560 Vcf Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E560F Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E560F Vcf Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E560N Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E560N Vcf Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E660 Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E660F Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E660N Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E665 Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E665F Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail E665N Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail G560 Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail G560 Vcf Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail G560F Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail G560F Vcf Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P470 Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P570 Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P570 Vcf Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P570F Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P570F Vcf Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P580N Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P580N Vcf Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P670F Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P670N Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P675F Firmware: before 8.0.100 — fixed in 8.0.100
• Dell Vxrail P675N Firmware: before 8.0.100 — fixed in 8.0.100

How to fix

Upgrade to a fixed version: Dell Vxrail D560 Firmware 8.0.100; Dell Vxrail D560F Firmware 8.0.100; Dell Vxrail E460 Firmware 8.0.100; Dell Vxrail E560 Firmware 8.0.100; Dell Vxrail E560 Vcf Firmware 8.0.100; Dell Vxrail E560F Firmware 8.0.100; Dell Vxrail E560F Vcf Firmware 8.0.100; Dell Vxrail E560N Firmware 8.0.100; Dell Vxrail E560N Vcf Firmware 8.0.100; Dell Vxrail E660 Firmware 8.0.100; Dell Vxrail E660F Firmware 8.0.100; Dell Vxrail E660N Firmware 8.0.100. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/kbdoc/en-us/000214659/dsa-2023-200-security-update-for-dell-vxrail-for-multiple-third-party-component-vulnerabilities
• https://www.dell.com/support/kbdoc/en-us/000214659/dsa-2023-200-security-update-for-dell-vxrail-for-multiple-third-party-component-vulnerabilities

Get alerted when CVE-2023-32463 or the next vulnerability affects your stack