Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

Article Number: 000153603


DSA-2020-151: Dell EMC NetWorker Runtime Environment (NRE) Security Update for Java SE Embedded Vulnerabilities

Article Content


Impact

High

Details

Summary:    
Java SE Embedded components within Dell EMC NetWorker Runtime Environment (NRE) require a security update to address various vulnerabilities. 

Third-party Component
 
CVE(s) More information
Java SE Embedded CVE-2020-2754 See NVD (http://nvd.nist.gov/) for individual scores for each CVE.
https://www.oracle.com/security-alerts/cpuapr2020.html
CVE-2020-2755
CVE-2020-2773
CVE-2020-2803
CVE-2020-2805
CVE-2020-2830

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.  

To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search
Third-party Component
 
CVE(s) More information
Java SE Embedded CVE-2020-2754 See NVD (http://nvd.nist.gov/) for individual scores for each CVE.
https://www.oracle.com/security-alerts/cpuapr2020.html
CVE-2020-2755
CVE-2020-2773
CVE-2020-2803
CVE-2020-2805
CVE-2020-2830

For more information about any of the Common Vulnerabilities and Exposures (CVEs) mentioned here, consult the National Vulnerability Database (NVD) at http://nvd.nist.gov/home.cfm.  

To search for a particular CVE, use the database s search utility at http://web.nvd.nist.gov/view/vuln/search
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.

Affected Products and Remediation

Affected products:    
Dell EMC NetWorker Runtime Environment (NRE) versions prior to 8.0.5

Remediation:
The following Dell EMC NetWorker Runtime Environment (NRE) release addresses these vulnerabilities:    

  • Dell EMC NetWorker Runtime Environment (NRE) 8.0.5

For Dell EMC NetWorker Runtime Environment (NRE) 8.0.4 and later, the security update is contained in the release 8.0.5.

Dell EMC recommends all customers upgrade at the earliest opportunity.



Affected products:    
Dell EMC NetWorker Runtime Environment (NRE) versions prior to 8.0.5

Remediation:
The following Dell EMC NetWorker Runtime Environment (NRE) release addresses these vulnerabilities:    

  • Dell EMC NetWorker Runtime Environment (NRE) 8.0.5

For Dell EMC NetWorker Runtime Environment (NRE) 8.0.4 and later, the security update is contained in the release 8.0.5.

Dell EMC recommends all customers upgrade at the earliest opportunity.



Related Information


Article Properties


Affected Product

NetWorker

Product
NetWorker, NetWorker for OpenVMS, NetWorker Management Console, NetWorker Module, NetWorker Module for Databases and Applications, NetWorker Module for MEDITECH, NetWorker Module for Microsoft, NetWorker Module for SAP, NetWorker SnapImage Module , Product Security Information ...
Last Published Date

22 May 2021

Version

4

Article Type

Dell Security Advisory