CVE-2023-23690

State
Published
Severity
7.0 High
Published
Jan 19, 2023
Updated
Apr 2, 2025
Reserved
Jan 17, 2023

Read the record on cve.org

Description

Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability. A threat actor does not need any specific privileges to potentially exploit this vulnerability. An attacker could perform a man-in-the-middle attack and eavesdrop on encrypted communications from Cloud Mobility to Cloud Storage devices. Exploitation could lead to the compromise of secret and sensitive information, cloud storage connection downtime, and the integrity of the connection to the Cloud devices.

Scores

CVSSScoreVectorSource
3.17.0 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:Ldell

Weaknesses

  • CWE-299 Improper Check for Certificate Revocation

Affected Products

ProductVersions
Cloud Mobility for Dell StorageDell
  • before 1.3.3.XAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.