CVE-2023-23691
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H
AI Score
Confidence
High
EPSS
Percentile
40.4%
Dell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability to force a victim’s browser to desynchronize its connection with the website, typically leading to XSS and DoS.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | powervault_me5012_firmware | * | cpe:2.3:o:dell:powervault_me5012_firmware:*:*:*:*:*:*:*:* |
| dell | powervault_me5012 | - | cpe:2.3:h:dell:powervault_me5012:-:*:*:*:*:*:*:* |
| dell | powervault_me5024_firmware | * | cpe:2.3:o:dell:powervault_me5024_firmware:*:*:*:*:*:*:*:* |
| dell | powervault_me5024 | - | cpe:2.3:h:dell:powervault_me5024:-:*:*:*:*:*:*:* |
| dell | powervault_me5084_firmware | * | cpe:2.3:o:dell:powervault_me5084_firmware:*:*:*:*:*:*:*:* |
| dell | powervault_me5084 | - | cpe:2.3:h:dell:powervault_me5084:-:*:*:*:*:*:*:* |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H
AI Score
Confidence
High
EPSS
Percentile
40.4%