Authentication Bypass Vulnerability in Dell Power Protect Cyber Recovery
CVE-2023-32465

8.8HIGH

Key Information:

Vendor

Dell
Status
Powerprotect Cyber Recovery
Vendor
CVE Published:
14 June 2023

What is CVE-2023-32465?

Dell Power Protect Cyber Recovery exhibits a vulnerability that allows attackers to bypass authentication mechanisms. This flaw could allow an unauthorized individual to gain administrative access to the Cyber Recovery application, posing a significant risk of a complete system takeover. It is essential for users and administrators to apply security updates promptly to mitigate the potential threats associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PowerProtect Cyber Recovery 19.4 through 19.13.0.2

References

https://www.dell.com/support/kbdoc/en-us/000214943/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.