VULNERABILITY INTELLIGENCE
CVE-2023-32465
CVSS score8.8 HIGH
EPSS probability0.73%
CISA KEVNot currently listed
Published2023-06-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker.
Weakness classification
- CWE-644: Improper Neutralization of HTTP Headers for Scripting Syntax
Primary references
- security_alert@emc.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory