DSA-2025-373: Security Update for Dell Repository Manager Vulnerability
Samenvatting: Dell Repository Manager remediation is available for Time-of-Check to Time-of-Use (TOCTOU) race condition that could be exploited by malicious users to compromise the affected system.
Dit artikel is van toepassing op
Dit artikel is niet van toepassing op
Dit artikel is niet gebonden aan een specifiek product.
Niet alle productversies worden in dit artikel vermeld.
Impact
High
Gegevens
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-45376 |
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.5 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-45376 |
Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.5 |
Getroffen producten en herstel
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
Dell Repository Manager |
Versions 3.4.7 and 3.4.8 |
Version 3.4.9 |
https://www.dell.com/support/home/drivers/driversdetails?driverId=915XT |
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
Dell Repository Manager |
Versions 3.4.7 and 3.4.8 |
Version 3.4.9 |
https://www.dell.com/support/home/drivers/driversdetails?driverId=915XT |
No action required from the customer if DRM v3.4.9 is already installed by the customer. However, we recommend the workaround mentioned above.
Tijdelijke oplossingen en risicobeperking
|
CVE ID |
Workaround and Mitigation |
|
CVE-2025-45376 |
Ensure there is no symbolic link to DRM working directory and its sub-directories. |
Revisiegeschiedenis
|
Revision |
Date |
Description |
|
1.0 |
2025-09-29 |
Initial Release |
Bevestigingen
Dell would like to thank Ouallaout Noureddine for reporting this issue.
Verwante informatie
Juridische verklaring van afstand
Getroffen producten
Dell EMC Repository Manager - Current VersionsArtikeleigenschappen
Artikelnummer: 000375461
Artikeltype: Dell Security Advisory
Laatst aangepast: 29 sep. 2025
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.