Man-in-the-Middle Vulnerability in Dell Unity VSA and Unity XT
CVE-2023-43082

5.9MEDIUM

Key Information:

Vendor

Dell
Status
Unity
Vendor
CVE Published:
22 November 2023

What is CVE-2023-43082?

Dell Unity prior to version 5.3 is susceptible to a man-in-the-middle vulnerability within its vmadapter component. This issue arises when a customer uses a certificate issued by a third-party public Certificate Authority. An attacker could exploit this vulnerability by spoofing the vCenter CA, provided they can obtain a CA-signed certificate. This could potentially compromise the security of user data and communications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Unity Versions prior to 5.3.0.0.5.120

References

https://www.dell.com/support/kbdoc/en-us/000213152/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.