CVE-2023-32464
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability...
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
- Record
CVE-2023-32464- CVSS 3.1
- 2.7 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
EUVDEUVD-2023-36708
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
- Record
EUVD-2023-36708- CVSS 3.1
- 2.7 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hq4r-9xhw-3x4h
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability...
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
- Record
GHSA-hq4r-9xhw-3x4h- CVSS 3.1
- 2.7 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
NVD
Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
- Record
CVE-2023-32464- CVSS 3.1
- 2.7 Low
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N - CVSS 3.1
- 3.3 Low
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N - Weakness
- CWE-295
- Updated
- 2026-11-02
Affected products
- dell emc vxrail appliance
- dell vxrail d560 firmware
- dell vxrail d560f firmware
- dell vxrail e460 firmware
- dell vxrail e560 firmware
- dell vxrail e560 vcf firmware
- dell vxrail e560f firmware
- dell vxrail e560f vcf firmware
- dell vxrail e560n firmware
- dell vxrail e560n vcf firmware
- dell vxrail e660 firmware
- dell vxrail e660f firmware
Show 34 moreShow less
- dell vxrail e660n firmware
- dell vxrail e665 firmware
- dell vxrail e665f firmware
- dell vxrail e665n firmware
- dell vxrail g560 firmware
- dell vxrail g560 vcf firmware
- dell vxrail g560f firmware
- dell vxrail g560f vcf firmware
- dell vxrail p470 firmware
- dell vxrail p570 firmware
- dell vxrail p570 vcf firmware
- dell vxrail p570f firmware
- dell vxrail p570f vcf firmware
- dell vxrail p580n firmware
- dell vxrail p580n vcf firmware
- dell vxrail p670f firmware
- dell vxrail p670n firmware
- dell vxrail p675f firmware
- dell vxrail p675n firmware
- dell vxrail s470 firmware
- dell vxrail s570 firmware
- dell vxrail s570 vcf firmware
- dell vxrail s670 firmware
- dell vxrail v470 firmware
- dell vxrail v570 firmware
- dell vxrail v570 vcf firmware
- dell vxrail v570f firmware
- dell vxrail v570f vcf firmware
- dell vxrail v670f firmware
- dell vxrail vd-4000r firmware
- dell vxrail vd-4000w firmware
- dell vxrail vd-4000z firmware
- dell vxrail vd-4510c firmware
- dell vxrail vd-4520c firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-32464 is a low vulnerability (CVSS 2.7) in Dell Emc Vxrail Appliance, published June 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. No source names a fixed version.