VxWorks WDB Debug Service Detection on PowerVault 132T

Question

Received a Critical alert from a Nessus scan about a 'VxWorks WDB Debug Agent is running on this host.' the target is our Dell PowerVault 132T. I've looked around to find a solution but came up empty handed. the closest thing I could find was for a Dell 6248 PowerConnect switch that has the same Nessus alert. The solution there was to update the firmware. will a firmware update correct this issue as well? (Source: http://en.community.dell.com/support-forums/network-switches/f/866/t/19586707) Currently running on -- Library Firmware 310D .GY004 RMU Firmware 193F.00002 ------------------------------------------------------------------ Description A VxWorks WDB Debug Agent is running on this host. Using this service, it is possible to read or write any memory zone or execute arbitrary code on the host. An attacker can use this flaw to take complete control of the affected device. Solution Disable the debug agent or contact the device's vendor for a patch.

DELL-Josh Cr · Answer

Hi,

You can try updating the firmware. http://www.dell.com/support/home/us/en/19/Drivers/DriversDetails?driverId=PF8TT&fileId=2731109118&osCode=WNET&productCode=powervault-lto-132t&languageCode=en&categoryId=TA

However it has not had an update since 2009 and that may not resolve the issue.

PowerVault

Was this post helpful?