DSA-2025-373: Security Update for Dell Repository Manager Vulnerability
Sommaire: Dell Repository Manager remediation is available for Time-of-Check to Time-of-Use (TOCTOU) race condition that could be exploited by malicious users to compromise the affected system.
Cet article s’applique à
Cet article ne s’applique pas à
Cet article n’est lié à aucun produit spécifique.
Toutes les versions de produits ne sont pas identifiées dans cet article.
Impact
High
Détails
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-45376 |
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.5 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-45376 |
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.5 |
Produits touchés et correction
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
Dell Repository Manager |
Versions 3.4.7 and 3.4.8 |
Version 3.4.9 |
https://www.dell.com/support/home/drivers/driversdetails?driverId=915XT |
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
Dell Repository Manager |
Versions 3.4.7 and 3.4.8 |
Version 3.4.9 |
https://www.dell.com/support/home/drivers/driversdetails?driverId=915XT |
No action required from the customer if DRM v3.4.9 is already installed by the customer. However, we recommend the workaround mentioned above.
Solutions de contournement et mesures d’atténuation
|
CVE ID |
Workaround and Mitigation |
|
CVE-2025-45376 |
Ensure there is no symbolic link to DRM working directory and its sub-directories. |
Historique de révision
|
Revision |
Date |
Description |
|
1.0 |
2025-09-29 |
Initial Release |
Reconnaissances
Dell would like to thank Ouallaout Noureddine for reporting this issue.
Renseignements connexes
Avis de non-responsabilité
Produits touchés
Dell EMC Repository Manager - Current VersionsPropriétés de l’article
Numéro d’article: 000375461
Type d’article: Dell Security Advisory
Dernière modification: 29 sept. 2025
Obtenez des réponses à vos questions auprès d’autre utilisateurs de Dell
Services de soutien
Vérifiez si votre appareil est couvert par les services de soutien.