Vulnerability · Published Jun 14, 2023 · Assigned by dell
CVE-2023-32465
High 8.8
In plain English
A high-severity security flaw in PowerProtect Cyber Recovery from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.7%top 45.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | PowerProtect Cyber Recovery | 19.4 through 19.13.0.2 |
Weakness: CWE-644 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H