CVE-2023-39244 is a High severity (CVSS 7.3) information disclosure flaw in the EHAC component of Dell Enterprise Storage Integrator for SAP LAMA 10.0. An unauthenticated attacker watching network traffic could obtain admin level credentials. The fix is in Dell bulletin DSA-2023-299, whose version details should be checked.
What's affected
The record lists Dell Enterprise Storage Integrator (ESI) for SAP LAMA, version 10.0, and places the flaw in the EHAC component. Dell's bulletin is DSA-2023-299, which covers multiple vulnerabilities. Dell's support site blocked automated access when this post was reviewed, so we could not read the bulletin and cannot confirm the fixed version. Open DSA-2023-299 and follow its remediation table.
This CVE and its sibling CVE-2023-39244 or CVE-2023-39245 carry the same description in NVD and cite the same Dell bulletin, but they are scored and classified differently. That is worth knowing if your scanner lists both: they most likely describe one underlying exposure of credentials in network traffic, not two separate bugs.
How to check if you're exposed
Find out whether your SAP environment uses Dell ESI for SAP LAMA and which version is installed. The record names version 10.0. Ask your SAP basis team and your storage team, since the integration often sits between them.
Then read DSA-2023-299 on Dell's support site and compare the version you run to its remediation table. Because the flaw is about credentials crossing the network, also look at how the EHAC component communicates: whether the traffic between the integrator and the systems it talks to crosses shared network segments, and whether any packet capture or monitoring tool could have recorded it.
What to do now
- Confirm whether Dell ESI for SAP LAMA 10.0 is deployed and where.
- Read Dell bulletin DSA-2023-299 and apply the update or remediation it lists.
- After updating, change the administrator credentials the integrator uses, since they may have crossed the network in a readable form.
- Place the integrator and the systems it manages on a segment that ordinary users and unmanaged devices cannot sniff.
- Review who can capture traffic on that segment, and check logs for administrator logins from unexpected sources.
Why it matters
The record maps this CVE to CWE-284 (improper access control), though the description is about information exposure: an attacker who can eavesdrop on network traffic could gain admin level credentials. The sibling CVE-2023-39245 carries the identical description with a different weakness class and score.
The vector is network based, needs no privileges and no user interaction, and rates the impact as low across confidentiality, integrity and availability, which is how the score lands at 7.3. In practice, admin credentials are worth more than that vector suggests, because they unlock whatever the account can manage. How much that is depends on your setup. The attacker must be positioned to see the traffic, so segmentation matters. The record does not mark the CVE as exploited, and it is not in the CISA Known Exploited Vulnerabilities catalog.
Quick check
Does the attacker need to log in first?
No. The description says a remote unauthenticated attacker could exploit it, but they must be able to observe the network traffic between the systems.
Why do CVE-2023-39244 and CVE-2023-39245 look identical?
They carry the same description and cite the same Dell bulletin. NVD records them with different scores and weakness classes, 7.3 and 9.8. Treat them as one exposure and fix both with the same update.
Sources
- Dell DSA-2023-299: security update for Dell ESI for SAP LAMA (listed in the record; blocked from automated access when reviewed)
- Record data for CVE-2023-39244
Last reviewed: 19 October 2026.
