CVE-2023-23694

HIGH 7.8CVE-2023-23694 · Published 23/05/2023 · updated 17/06/2026

In short

CVE-2023-23694 is a HIGH (CVSS 7.8) vulnerability affecting vxrail hyperconverged infrastructure (dell).
Chance of exploitation in the next 30 days (EPSS): 0.70%, higher than 53.2% of all vulnerabilities.
Fix: update to 7.0.450 or later.

Package	Affected versions	Patched versions
vxrail hyperconverged infrastructure dell	`≥ 7.0.0, < 7.0.450`	`7.0.450`

Description

Dell VxRail versions earlier than 7.0.450, contain(s) an OS command injection vulnerability in VxRail Manager. A local authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.

References

dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450 · Vendor Advisory

More vulnerabilities in vxrail hyperconverged infrastructure

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free