CVE-2023-23690
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability. A threat actor does not need any specific privileges to potentially exploit this vulnerability. An attacker could perform a man-in-the-middle attack and eavesdrop on encrypted communications from Cloud Mobility to Cloud Storage devices. Exploitation could lead to the compromise of secret and sensitive information, cloud storage connection downtime, and the integrity of the connection to the Cloud devices.
Cloud Mobility for Dell EMC Storage, versiones 1.3.0.X e inferiores, contiene una vulnerabilidad de verificación incorrecta de revocación de certificados. Un actor de amenazas no necesita ningún privilegio específico para explotar potencialmente esta vulnerabilidad. Un atacante podría realizar un ataque man-in-the-middle y escuchar a escondidas las comunicaciones cifradas desde Cloud Mobility a los dispositivos de Cloud Storage. La explotación podría comprometer la información secreta y sensible, el tiempo de inactividad de la conexión de almacenamiento en la nube y la integridad de la conexión a los dispositivos en la nube.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-01-17 CVE Reserved
- 2023-01-19 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-11 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-295: Improper Certificate Validation
- CWE-299: Improper Check for Certificate Revocation
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Dell Search vendor "Dell" | Cloud Mobility For Dell Emc Storage Search vendor "Dell" for product "Cloud Mobility For Dell Emc Storage" | < 1.3.4.0 Search vendor "Dell" for product "Cloud Mobility For Dell Emc Storage" and version " < 1.3.4.0" | - |
Affected
|