CVE-2023-23691
Published Jan 20, 2023
Last updated a year ago
Overview
- Description
- Dell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability to force a victim's browser to desynchronize its connection with the website, typically leading to XSS and DoS.
- Source
- security_alert@emc.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.3
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H
- Severity
- HIGH
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:powervault_me5012_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A02045C1-AF78-47AF-8FD9-2505DA8B1D75",
"versionEndExcluding": "me5.1.1.0.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:powervault_me5012:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F5504865-CF03-4B7D-9448-F334044EF4CB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:powervault_me5024_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE7B7D46-01AF-4B50-B7A3-828E135F4A47",
"versionEndExcluding": "me5.1.1.0.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:powervault_me5024:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1A402192-509E-4E57-839A-B95F92E22479"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:powervault_me5084_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF402AE5-B146-400D-9FBB-F9CE6E36B5BB",
"versionEndExcluding": "me5.1.1.0.5"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:powervault_me5084:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0B607B99-3C92-4DF1-A12F-03050485EF0A"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]