CVE-2023-32464

3.3 lowEPSS 0.2%

Low (3.3) in dell. EPSS 0.2% chance of exploitation in the next 30 days.

Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2023-06-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:vxrail_d560_firmware
dell:vxrail_d560f_firmware
dell:vxrail_e460_firmware
dell:vxrail_e560_firmware
dell:vxrail_e560_vcf_firmware
dell:vxrail_e560f_firmware
dell:vxrail_e560f_vcf_firmware
dell:vxrail_e560n_firmware
dell:vxrail_e560n_vcf_firmware
dell:vxrail_e660_firmware
dell:vxrail_e660f_firmware
dell:vxrail_e660n_firmware
dell:vxrail_e665_firmware
dell:vxrail_e665f_firmware
dell:vxrail_e665n_firmware
dell:vxrail_g560_firmware
dell:vxrail_g560_vcf_firmware
dell:vxrail_g560f_firmware
dell:vxrail_g560f_vcf_firmware
dell:vxrail_p470_firmware
dell:vxrail_p570_firmware
dell:vxrail_p570_vcf_firmware
dell:vxrail_p570f_firmware
dell:vxrail_p570f_vcf_firmware
dell:vxrail_p580n_firmware
dell:vxrail_p580n_vcf_firmware
dell:vxrail_p670f_firmware
dell:vxrail_p670n_firmware
dell:vxrail_p675f_firmware
dell:vxrail_p675n_firmware
dell:vxrail_s470_firmware
dell:vxrail_s570_firmware
dell:vxrail_s570_vcf_firmware
dell:vxrail_s670_firmware
dell:vxrail_v470_firmware
dell:vxrail_v570_firmware
dell:vxrail_v570_vcf_firmware
dell:vxrail_v570f_firmware
dell:vxrail_v570f_vcf_firmware
dell:vxrail_v670f_firmware
dell:vxrail_vd-4000r_firmware
dell:vxrail_vd-4000w_firmware
dell:vxrail_vd-4000z_firmware
dell:vxrail_vd-4510c_firmware
dell:vxrail_vd-4520c_firmware

References

Check your stack JSON