CVE-2023-23694

Dell VxRail versions earlier than 7.0.450, contain(s) an OS command injection vulnerability in VxRail Manager. A local authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker.

• CWE-78
• CWE-78

• https://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450Vendor Advisory
• https://www.dell.com/support/kbdoc/en-us/000213011/dsa-2023-071-dell-vxrail-security-update-for-multiple-third-party-component-vulnerabilities-7-0-450Vendor Advisory

Published

May 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23689 Dell PowerScale nodes A200, A2000, H400, H500, H600, H5600,…7.5
• CVE-2023-2369A vulnerability was found in SourceCodester Faculty Evaluati…9.8
• CVE-2023-23690 Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and b…7
• CVE-2023-23691 Dell EMC PV ME5, versions ME5.1.0.0.0 and ME5.1.0.1.0, cont…8.8
• CVE-2023-23692 Dell EMC prior to version DDOS 7.9 contain(s) an OS command…8.8
• CVE-2023-23693 Dell VxRail, versions prior to 7.0.450, contains an OS comm…8.2
• CVE-2023-23695 Dell Secure Connect Gateway (SCG) version 5.14.00.12 contai…5.9
• CVE-2023-23696 Dell Command Intel vPro Out of Band, versions prior to 4.3.…7.8
• CVE-2023-23697Dell Command | Intel vPro Out of Band, versions before 4.4.0…3.3
• CVE-2023-23698 Dell Command | Update, Dell Update, and Alienware Update ve…7.1
• CVE-2023-23699Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulne…5.4
• CVE-2023-2370A vulnerability classified as critical has been found in Sou…9.8