CVE-2025-38739

CVSS 7.2v3.1pub. 2025-08-04upd. 2025-08-18

Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to Information Disclosure.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L

Dell Digital Delivery
APP
Dell
< 5.6.1.0

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

Tags

Auth Bypass

CWE

CWE-522

References

www.dell.com/support/kbdoc/en-us/000349489/dsa-2025-302…

Related vulnerabilities

CVE-2024-0155HIGH7.0ten sam produkt

Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability. A local low privileg...

CVE-2024-0156HIGH7.0ten sam produkt

Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privile...

CVE-2020-5342HIGH7.8ten sam produkt

Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A loc...

CVE-2019-3744HIGH7.8ten sam produkt

Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local...

CVE-2019-3742HIGH7.8ten sam produkt

Dell/Alienware Digital Delivery versions prior to 3.5.2013 contain a privilege escalation vulnerability. A loc...