Improper Verification of Cryptographic Signature in Dell ECS

CVE-2023-25934

What is CVE-2023-25934?

Dell ECS versions prior to 3.8.0.2 are affected by a vulnerability that allows an attacker on the network to intercept requests. This improper verification of cryptographic signatures can let the attacker modify the body data of these requests, potentially leading to unauthorized access or manipulation of data. Organizations using affected versions are advised to update to the latest release to mitigate this security risk.

References