intel-sa-00615 vulnerability (CVE-2022-21166)

De3jay,

The vulnerabilities are discussed here, which shows the BIOS update version that are affected by the vulnerabilities, and also identifies the version needed to address the vulnerability. For example for the R740, the 2.14.2 BIOS update is listed as containing the fix for the vulnerabilities, and shows anything prior to that version as affected.

Let me know if this helps. 

Thanks Chris I will apply this to our Servers. will update on the status

by the way i forgot to say.. the server that we will be installing this BIOS update is an ESXi host. any advise on how to do this?

Hi @de3jay,

A couple of ways, through Lifecycle Controller or iDRAC. You can refer to this general page for various ways: https://dell.to/3OzEIpG. In the page, you can find both Lifecycle and iDRAC method of update.