Dell Vxrail Hyperconverged Infrastructure vulnerabilities

3 CVEs affecting Dell Vxrail Hyperconverged Infrastructure, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-53292, published 2024-12-11.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-23694, published 2023-05-23. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell VxRail versions earlier than 7.0.450, contain(s) an OS command injection vulnerability in VxRail Manager. A local authenticated attacker could potentially exploit this vulnerability, leading to…
• CVE-2023-23693, published 2023-05-23. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Dell VxRail, versions prior to 7.0.450, contains an OS command injection Vulnerability in DCManager command-line utility. A local high privileged attacker could potentially exploit this…
• CVE-2024-53292, published 2024-12-11. Medium severity, CVSS 6.7. EPSS: 0.1% chance of exploitation in the next 30 days. Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability,…