CVE-2023-43082: Dell Unity Operating Environment

Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days.

Dell Unity prior to 5.3 contains a 'man in the middle' vulnerability in the vmadapter component. If a customer has a certificate signed by a third-party public Certificate Authority, the vCenter CA could be spoofed by an attacker who can obtain a CA-signed certificate.

Affected products

• Dell Unity Operating Environment: before 5.3.0.0.5.120 (fixed in 5.3.0.0.5.120)
• Dell Unity Xt Operating Environment: before 5.3.0.0.5.120 (fixed in 5.3.0.0.5.120)
• Dell Unityvsa Operating Environment: before 5.3.0.0.5.120 (fixed in 5.3.0.0.5.120)

Published 2023-11-22. Last modified 2026-06-17.