What’s Vulnerable › Vulnerabilities
CVE-2023-32464
- Severity: low (CVSS 3.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-06-23 · updated 2026-06-17
- Weakness: CWE-295
Description
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
Affected products
- Dell Vxrail D560 Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail D560F Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E460 Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E560 Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E560 Vcf Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E560F Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E560F Vcf Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E560N Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E560N Vcf Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E660 Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E660F Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E660N Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E665 Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E665F Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail E665N Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail G560 Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail G560 Vcf Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail G560F Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail G560F Vcf Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P470 Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P570 Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P570 Vcf Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P570F Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P570F Vcf Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P580N Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P580N Vcf Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P670F Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P670N Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P675F Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
- Dell Vxrail P675N Firmware: from 7.0.0 before 7.0.450 — fixed in 7.0.450
How to fix
Upgrade to a fixed version: Dell Vxrail D560 Firmware 7.0.450; Dell Vxrail D560F Firmware 7.0.450; Dell Vxrail E460 Firmware 7.0.450; Dell Vxrail E560 Firmware 7.0.450; Dell Vxrail E560 Vcf Firmware 7.0.450; Dell Vxrail E560F Firmware 7.0.450; Dell Vxrail E560F Vcf Firmware 7.0.450; Dell Vxrail E560N Firmware 7.0.450; Dell Vxrail E560N Vcf Firmware 7.0.450; Dell Vxrail E660 Firmware 7.0.450; Dell Vxrail E660F Firmware 7.0.450; Dell Vxrail E660N Firmware 7.0.450. Check the vendor advisory for mitigations.
References
- https://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450
- https://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450
Get alerted when CVE-2023-32464 or the next vulnerability affects your stack