CVE-2023-25934CWE-347
DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability
Medium · published May 4, 2023
What it is
DELL ECS prior to 3.8.0.2 contains an improper verification of cryptographic signature vulnerability. A network attacker with an ability to intercept the request could potentially exploit this vulnerability to modify the body data of the request.
The record
Technical detail
- CVSS v3.1
- 5.9 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00268 · 18.0th percentile
- Weakness
- CWE-347 · Improper Verification of Cryptographic Signature
- Published
- 2023-05-04T06:58Z
EPSS history
Timeline