CVE-2023-32465CWE-644

Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability

High · published June 14, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access to the Cyber Recovery application. Exploitation may lead to complete system takeover by an attacker.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00725 · 53.5th percentile
Weakness
CWE-644 · Improper Neutralization of HTTP Headers for Scripting Syntax
Published
2023-06-14T13:41Z
EPSS history
Timeline
  • 14 JUN 13:41Z
    Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability
    cvelistv5