Improper Verification of Cryptographic Signature in Dell PowerStore

CVE-2023-32449

What is CVE-2023-32449?

Dell PowerStore versions prior to 3.5 are susceptible to a vulnerability that allows an attacker to exploit improper verification of cryptographic signatures. By tricking a high privileged user into installing a malicious binary, the attacker can effectively bypass established cryptographic checks. This poses a significant risk, as it can lead to unauthorized code execution and compromise system integrity.

References