CVE-2025-38739 Information disclosure in Dell Digital Delivery
Remote attackers can exploit insufficiently protected credentials in Dell Digital Delivery to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-38739?
CVE-2025-38739 is a high-severity vulnerability in Dell Digital Delivery, published on 4 Aug 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dell Digital Delivery, versions prior to 5.6.1.0, contains an Insufficiently Protected Credentials vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to Information Disclosure.
Weakness: CWE-522
Which versions are affected by CVE-2025-38739?
It affects 1 product.
Products include Dell Digital Delivery.
How do I fix CVE-2025-38739?
No fix has been published for CVE-2025-38739 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-38739 being exploited?
There is no known exploitation of CVE-2025-38739 in the wild and no public exploit code.
Other vulnerabilities in Dell Digital Delivery
- CVE-2020-5342 Privilege escalation in Dell Digital Delivery (Cirrus)
- CVE-2019-3742 Privilege escalation in Alienware Digital Delivery
- CVE-2019-3744 Privilege escalation in Alienware Digital Delivery
- CVE-2018-11072 Code injection in Dell Digital Delivery
- CVE-2024-0155 Use after free in Dell Digital Delivery (D3)
Sources
Also known as GHSA-jfv8-83v4-q3c5.