Improper Certificate Revocation Check in Dell EMC Cloud Mobility
CVE-2023-23690

7HIGH

Key Information:

Vendor
Dell
Status
Cloud Mobility for Dell Storage
Vendor
CVE Published:
19 January 2023

Summary

Dell EMC Cloud Mobility for Storage versions 1.3.0.X and earlier is affected by an Improper Check for Certificate Revocation vulnerability. This flaw allows attackers to perform man-in-the-middle attacks, enabling them to intercept and potentially reveal sensitive information contained in encrypted communications between Cloud Mobility and Cloud Storage devices. Exploiting this vulnerability can lead to unauthorized access to confidential data, disruption of cloud storage service, and a serious risk to the integrity of connections with cloud infrastructure.

Affected Version(s)

Cloud Mobility for Dell Storage 0 < 1.3.3.X

References

https://www.dell.com/support/kbdoc/en-us/000207521/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.