CVE-2023-39245 is a Critical severity (CVSS 9.8) flaw in the EHAC component of Dell Enterprise Storage Integrator for SAP LAMA 10.0, classed as cleartext transmission. A remote unauthenticated attacker watching network traffic could obtain admin level credentials. The remedy is in Dell bulletin DSA-2023-299, whose versions should be checked.
What's affected
The record lists Dell Enterprise Storage Integrator (ESI) for SAP LAMA, version 10.0, and places the flaw in the EHAC component. Dell's bulletin is DSA-2023-299, which covers multiple vulnerabilities. Dell's support site blocked automated access when this post was reviewed, so we could not read the bulletin and cannot confirm the fixed version. Open DSA-2023-299 and follow its remediation table.
This CVE and its sibling CVE-2023-39244 or CVE-2023-39245 carry the same description in NVD and cite the same Dell bulletin, but they are scored and classified differently. That is worth knowing if your scanner lists both: they most likely describe one underlying exposure of credentials in network traffic, not two separate bugs.
How to check if you're exposed
Find out whether your SAP environment uses Dell ESI for SAP LAMA and which version is installed. The record names version 10.0. Ask your SAP basis team and your storage team, since the integration often sits between them.
Then read DSA-2023-299 on Dell's support site and compare the version you run to its remediation table. Because the flaw is about credentials crossing the network, also look at how the EHAC component communicates: whether the traffic between the integrator and the systems it talks to crosses shared network segments, and whether any packet capture or monitoring tool could have recorded it.
What to do now
- Confirm whether Dell ESI for SAP LAMA 10.0 is deployed and where.
- Read Dell bulletin DSA-2023-299 and apply the update or remediation it lists.
- After updating, change the administrator credentials the integrator uses, since they may have crossed the network in a readable form.
- Place the integrator and the systems it manages on a segment that ordinary users and unmanaged devices cannot sniff.
- Review who can capture traffic on that segment, and check logs for administrator logins from unexpected sources.
Why it matters
The record maps this CVE to CWE-319 (cleartext transmission of sensitive information). Data that should travel over an encrypted channel is sent in a form that anyone who can see the traffic can read. Here the data is administrator credentials.
The score of 9.8 comes from a vector with network access, low complexity, no privileges, no user interaction, and high impact on confidentiality, integrity and availability. The sibling CVE-2023-39244 has the same description and a score of 7.3. The gap is a scoring choice, not a different bug, so do not let the lower number set your priority. The attacker does need to be able to observe the traffic, which limits exposure on well segmented networks. The record does not mark the CVE as exploited, and it is not in the CISA Known Exploited Vulnerabilities catalog.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Is 9.8 or 7.3 the right score for this exposure?
NVD records 9.8 for CVE-2023-39245 and 7.3 for CVE-2023-39244, with the same description. Use the higher one for prioritization unless your own analysis of your network says otherwise.
What should I rotate after patching?
The administrator credentials used by the integrator, since they may have crossed the network in readable form before the fix.
Sources
- Dell DSA-2023-299: security update for Dell ESI for SAP LAMA (listed in the record; blocked from automated access when reviewed)
- Record data for CVE-2023-39245
Last reviewed: 19 October 2026.
