CVE-2023-39245CWE-319

DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component

Critical · published February 15, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
47.5
In the wild
Unconfirmed
What it is

🚨 An unauthenticated eavesdropper could snag your admin credentials with a mere sniff of the network. This vulnerability hides in the EHAC component of DELL ESI for SAP LAMA, version 10.0, and it’s a doozy! 🔥 Think of it like a coffee shop where the Wi-Fi is open and anyone can tune into the conversations happening around them. If someone’s listening closely, they could overhear sensitive discussions, including your secret plans! If exploited, an attacker could gain full admin access to your systems, leading to data breaches, unauthorized changes, or even complete system compromise. This is absolutely devastating and places your entire infrastructure at risk! 🔥

Put simply

Think of it like a coffee shop where the Wi-Fi is open and anyone can tune into the conversations happening around them. If someone’s listening closely, they could overhear sensitive discussions, including your secret plans! This vulnerability allows remote unauthenticated attackers to intercept and decode network traffic, potentially exposing sensitive admin credentials. It’s a classic case of information disclosure that can lead to severe consequences.

What to do

If exploited, an attacker could gain full admin access to your systems, leading to data breaches, unauthorized changes, or even complete system compromise. This is absolutely devastating and places your entire infrastructure at risk! 🔥 Immediate action is crucial! Upgrade to the latest version of DELL ESI and ensure that all network traffic is encrypted to safeguard against sniffing attacks. It’s time to tighten those security measures! 🛡️ You've got this! With the right steps, you can secure your systems and keep those pesky attackers at bay! 💪😊

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00591 · 47.5th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2024-02-15T13:03Z
EPSS history
Timeline
  • 15 FEB 13:03Z
    DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component
    cvelistv5