CVSS 3.1 Score 9.8 of 10 (high)


Published Feb 15, 2024
CWE ID 319


CVE-2023-39245 is an information disclosure vulnerability found in DELL ESI (Enterprise Storage Integrator) for SAP LAMA version 10.0. This vulnerability affects the EHAC component and can be exploited by an unauthenticated attacker who eavesdrops on network traffic to gain admin level credentials. The vulnerability has a base severity of CRITICAL with a base score of 9.8 according to the CVSS:3.1 scoring system. It poses a high risk to organizations as it allows unauthorized access to sensitive information, resulting in potential data breaches and compromise of system integrity. To remediate this vulnerability, users should apply the necessary patches or updates provided by DELL to address the issue and ensure secure communication within their network infrastructure.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-39245 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options