CVE-2023-39250
High
Description
Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Manager for VMware (RMSV) versions prior to 3.1.2 contain an information disclosure vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to retrieve an encryption key that could aid in further attacks.
SeverityHigh
CVSS7.8
Exploit probability—
ProductDell Replay Manager For Vmware
PublishedAug 16, 2023
First seenAug 16, 2023
Weakness typeCWE-540CWE-540
How to fix
Update
- dell replay_manager_for_vmware3.1.2 or later
- dell storage_integration_tools_for_vmware6.1.1 or later
- dell storage_vsphere_client_plugin6.1.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell replay_manager_for_vmware | v < 3.1.2 | 3.1.2 |
| dell storage_integration_tools_for_vmware | v < 6.1.1 | 6.1.1 |
| dell storage_vsphere_client_plugin | v < 6.1.1 | 6.1.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.