CVE-2023-32463

LOW

Dell VxRail < 8.0.100 - Unauthenticated Denial of Service via Upgrade Functionality

Title source: llm

Description

Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to degraded performance and system malfunction.

References (1)

Core 1

Core References

Vendor Advisory vendor-advisory

https://www.dell.com/support/kbdoc/en-us/000214659/dsa-2023-200-security-update-for-dell-vxrail-for-multiple-third-party-component-vulnerabilities

Scores

CVSS v3 3.4

EPSS 0.0027

EPSS Percentile 50.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-20

Status published

Products (45)

dell/vxrail_d560_firmware < 8.0.100

dell/vxrail_d560f_firmware < 8.0.100

dell/vxrail_e460_firmware < 8.0.100

dell/vxrail_e560_firmware < 8.0.100

dell/vxrail_e560_vcf_firmware < 8.0.100

dell/vxrail_e560f_firmware < 8.0.100

dell/vxrail_e560f_vcf_firmware < 8.0.100

dell/vxrail_e560n_firmware < 8.0.100

dell/vxrail_e560n_vcf_firmware < 8.0.100

dell/vxrail_e660_firmware < 8.0.100

... and 35 more

Published Jun 23, 2023

Tracked Since Feb 18, 2026