7.5

CVE-2023-32463

Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Vxrail D560 Firmware Version < 8.0.100
   Dell ≫ Vxrail D560 Version -
Dell ≫ Vxrail D560f Firmware Version < 8.0.100
   Dell ≫ Vxrail D560f Version -
Dell ≫ Vxrail E460 Firmware Version < 8.0.100
   Dell ≫ Vxrail E460 Version -
Dell ≫ Vxrail E560 Firmware Version < 8.0.100
   Dell ≫ Vxrail E560 Version -
Dell ≫ Vxrail E560 Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail E560 Vcf Version -
Dell ≫ Vxrail E560f Firmware Version < 8.0.100
   Dell ≫ Vxrail E560f Version -
Dell ≫ Vxrail E560f Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail E560f Vcf Version -
Dell ≫ Vxrail E560n Firmware Version < 8.0.100
   Dell ≫ Vxrail E560n Version -
Dell ≫ Vxrail E560n Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail E560n Vcf Version -
Dell ≫ Vxrail E660 Firmware Version < 8.0.100
   Dell ≫ Vxrail E660 Version -
Dell ≫ Vxrail E660f Firmware Version < 8.0.100
   Dell ≫ Vxrail E660f Version -
Dell ≫ Vxrail E660n Firmware Version < 8.0.100
   Dell ≫ Vxrail E660n Version -
Dell ≫ Vxrail E665 Firmware Version < 8.0.100
   Dell ≫ Vxrail E665 Version -
Dell ≫ Vxrail E665f Firmware Version < 8.0.100
   Dell ≫ Vxrail E665f Version -
Dell ≫ Vxrail E665n Firmware Version < 8.0.100
   Dell ≫ Vxrail E665n Version -
Dell ≫ Vxrail G560 Firmware Version < 8.0.100
   Dell ≫ Vxrail G560 Version -
Dell ≫ Vxrail G560 Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail G560 Vcf Version -
Dell ≫ Vxrail G560f Firmware Version < 8.0.100
   Dell ≫ Vxrail G560f Version -
Dell ≫ Vxrail G560f Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail G560f Vcf Version -
Dell ≫ Vxrail P470 Firmware Version < 8.0.100
   Dell ≫ Vxrail P470 Version -
Dell ≫ Vxrail P570 Firmware Version < 8.0.100
   Dell ≫ Vxrail P570 Version -
Dell ≫ Vxrail P570 Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail P570 Vcf Version -
Dell ≫ Vxrail P570f Firmware Version < 8.0.100
   Dell ≫ Vxrail P570f Version -
Dell ≫ Vxrail P570f Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail P570f Vcf Version -
Dell ≫ Vxrail P580n Firmware Version < 8.0.100
   Dell ≫ Vxrail P580n Version -
Dell ≫ Vxrail P580n Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail P580n Vcf Version -
Dell ≫ Vxrail P670f Firmware Version < 8.0.100
   Dell ≫ Vxrail P670f Version -
Dell ≫ Vxrail P670n Firmware Version < 8.0.100
   Dell ≫ Vxrail P670n Version -
Dell ≫ Vxrail P675f Firmware Version < 8.0.100
   Dell ≫ Vxrail P675f Version -
Dell ≫ Vxrail P675n Firmware Version < 8.0.100
   Dell ≫ Vxrail P675n Version -
Dell ≫ Vxrail S470 Firmware Version < 8.0.100
   Dell ≫ Vxrail S470 Version -
Dell ≫ Vxrail S570 Firmware Version < 8.0.100
   Dell ≫ Vxrail S570 Version -
Dell ≫ Vxrail S570 Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail S570 Vcf Version -
Dell ≫ Vxrail S670 Firmware Version < 8.0.100
   Dell ≫ Vxrail S670 Version -
Dell ≫ Vxrail V470 Firmware Version < 8.0.100
   Dell ≫ Vxrail V470 Version -
Dell ≫ Vxrail V570 Firmware Version < 8.0.100
   Dell ≫ Vxrail V570 Version -
Dell ≫ Vxrail V570 Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail V570 Vcf Version -
Dell ≫ Vxrail V570f Firmware Version < 8.0.100
   Dell ≫ Vxrail V570f Version -
Dell ≫ Vxrail V570f Vcf Firmware Version < 8.0.100
   Dell ≫ Vxrail V570f Vcf Version -
Dell ≫ Vxrail V670f Firmware Version < 8.0.100
   Dell ≫ Vxrail V670f Version -
Dell ≫ Vxrail Vd-4000r Firmware Version < 8.0.100
   Dell ≫ Vxrail Vd-4000r Version -
Dell ≫ Vxrail Vd-4000w Firmware Version < 8.0.100
   Dell ≫ Vxrail Vd-4000w Version -
Dell ≫ Vxrail Vd-4000z Firmware Version < 8.0.100
   Dell ≫ Vxrail Vd-4000z Version -
Dell ≫ Vxrail Vd-4510c Firmware Version < 8.0.100
   Dell ≫ Vxrail Vd-4510c Version -
Dell ≫ Vxrail Vd-4520c Firmware Version < 8.0.100
   Dell ≫ Vxrail Vd-4520c Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.367
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EMC 3.4 0.8 2.5
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.dell.com/support/kbdoc/en-us/000214659/dsa-2023-200-security-update-for-dell-vxrail-for-multiple-third-party-component-vulnerabilities
Vendor Advisory