What is CVE-2023-32449?

CVE-2023-32449 is a high-severity vulnerability in Dell Powerstore, classified under Improper Verification of Cryptographic Signature. CVSS score: 7.2/10. Published 2023-06-22.

How severe is CVE-2023-32449?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Dell Powerstore

CVE-2023-32449

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks

Published 2023-06-22 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.001 (1.6th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 2nd percentile — 1.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000

Affected products

Dell Powerstore — versions Versions prior to 3.5.0.0-2050321
Dell Powerstore 1000t
Dell Powerstore 1200t
Dell Powerstore 3000t
Dell Powerstore 3200t
Dell Powerstore 5000t
Dell Powerstore 500t
Dell Powerstore 5200t
Dell Powerstore 7000t
Dell Powerstore 9000t

Weakness classification (CWE)

CWE-347 — Improper Verification of Cryptographic Signature

References

www.dell.com/support/kbdoc/en-us/000215171/dsa-2023-173-dell-powerstore-family-… (vendor-advisory, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2023-32449?: CVE-2023-32449 is a high-severity vulnerability in Dell Powerstore, classified under Improper Verification of Cryptographic Signature. CVSS score: 7.2/10. Published 2023-06-22.
How severe is CVE-2023-32449?: High severity. CVSS v3 base score is 7.2 out of 10.