CVE-2023-39250

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-16 · updated 2026-06-17
Weakness: CWE-540

Description

Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Manager for VMware (RMSV) versions prior to 3.1.2 contain an information disclosure vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to retrieve an encryption key that could aid in further attacks.

Affected products

Dell Replay Manager For Vmware: before 3.1.2 — fixed in 3.1.2
Dell Storage Integration Tools For Vmware: before 6.1.1 — fixed in 6.1.1
Dell Storage Vsphere Client Plugin: before 6.1.1 — fixed in 6.1.1

How to fix

Upgrade to a fixed version: Dell Replay Manager For Vmware 3.1.2; Dell Storage Integration Tools For Vmware 6.1.1; Dell Storage Vsphere Client Plugin 6.1.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-39250 or the next vulnerability affects your stack