← Database

CVE-2023-23691

HIGH CVSS: 8.1 Published: 2023-01-20 Modified: 2026-06-17

Description

Dell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, contains a Client-side desync Vulnerability. An unauthenticated attacker could potentially exploit this vulnerability to force a victim's browser to desynchronize its connection with the website, typically leading to XSS and DoS.

Affected Platforms

Dell Powervault Me5012Dell Powervault Me5084 FirmwareDell Powervault Me5084Dell Powervault Me5024Dell Powervault Me5024 FirmwareDell Powervault Me5012 Firmware

Weakness Type

CWE-444, CWE-444

References