DSA-2025-373: Security Update for Dell Repository Manager Vulnerability
Oversigt: Dell Repository Manager remediation is available for Time-of-Check to Time-of-Use (TOCTOU) race condition that could be exploited by malicious users to compromise the affected system.
Denne artikel gælder for
Denne artikel gælder ikke for
Denne artikel er ikke knyttet til et bestemt produkt.
Det er ikke alle produktversioner, der er identificeret i denne artikel.
Virkning
High
Oplysninger
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-45376 |
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.5 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-45376 |
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.5 |
Berørte produkter og udbedring
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
Dell Repository Manager |
Versions 3.4.7 and 3.4.8 |
Version 3.4.9 |
https://www.dell.com/support/home/drivers/driversdetails?driverId=915XT |
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
Dell Repository Manager |
Versions 3.4.7 and 3.4.8 |
Version 3.4.9 |
https://www.dell.com/support/home/drivers/driversdetails?driverId=915XT |
No action required from the customer if DRM v3.4.9 is already installed by the customer. However, we recommend the workaround mentioned above.
Løsninger og afhjælpninger
|
CVE ID |
Workaround and Mitigation |
|
CVE-2025-45376 |
Ensure there is no symbolic link to DRM working directory and its sub-directories. |
Revisionshistorik
|
Revision |
Date |
Description |
|
1.0 |
2025-09-29 |
Initial Release |
Bekræftelser
Dell would like to thank Ouallaout Noureddine for reporting this issue.
Relaterede oplysninger
Ansvarsfraskrivelse
Berørte produkter
Dell EMC Repository Manager - Current VersionsArtikelegenskaber
Artikelnummer: 000375461
Artikeltype: Dell Security Advisory
Senest ændret: 29 sep. 2025
Find svar på dine spørgsmål fra andre Dell-brugere
Supportservices
Kontrollér, om din enhed er dækket af supportservices.