CVE-2023-39244
High
Description
DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthenticated attacker could potentially exploit this vulnerability by eavesdropping the network traffic to gain admin level credentials.
SeverityHigh
CVSS7.3
Exploit probability—
ProductDell Enterprise Storage Integrator For Sap Landscape Management
PublishedFeb 15, 2024
First seenFeb 15, 2024
Weakness typeCWE-284Improper access control
How to fix
Update
- dell enterprise_storage_integrator_for_sap_landscape_management10.0.0.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell enterprise_storage_integrator_for_sap_landscape_management | v < 10.0.0.0 | 10.0.0.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.