DSA-2019-124: Dell EMC PowerConnect Security Vulnerability

Sammendrag: Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K firmware has been updated to address a vulnerability which may be potentially exploited to compromise the system.

Denne artikkelen gjelder for Denne artikkelen gjelder ikke for Denne artikkelen er ikke knyttet til noe bestemt produkt. Det er ikke produktversjonene som identifiseres i denne artikkelen.
Ta en titt på andre ressurser

Påvirkning

High

Detaljer

Dell PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.

CVSS Base Score:7.2 (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Dell PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.

CVSS Base Score:7.2 (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Dell Technologies anbefaler at alle kunder tar hensyn til både grunnpoengsummen og alle relevante, midlertidige og miljømessige resultater som kan påvirke den potensielle alvorlighetsgraden knyttet til bestemte sikkerhetsproblemer.

Berørte produkter og utbedring

Affected products:

The below Dell EMC PowerConnect models running firmware versions prior to 5.1.15.2: 

  • 8024
  • 7000
  • M6348
  • M6220
  • M8024
  • M8024-K

Remediation:

The following Dell EMC PowerConnect firmware release contains a resolution to the vulnerability:

  •     Dell EMC PowerConnect firmware version 5.1.15.2 and later.

Customers can download the latest firmware version at the support site for their respective model below:

  Dell EMC recommends all customers upgrade at the earliest opportunity. 
 

Affected products:

The below Dell EMC PowerConnect models running firmware versions prior to 5.1.15.2: 

  • 8024
  • 7000
  • M6348
  • M6220
  • M8024
  • M8024-K

Remediation:

The following Dell EMC PowerConnect firmware release contains a resolution to the vulnerability:

  •     Dell EMC PowerConnect firmware version 5.1.15.2 and later.

Customers can download the latest firmware version at the support site for their respective model below:

  Dell EMC recommends all customers upgrade at the earliest opportunity. 
 

Bekreftelser

Dell EMC would like to thank Daniel Cobb (@droctapus1) for reporting this vulnerability.

Relatert informasjon

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridisk ansvarsfraskrivelse

Berørte produkter

PowerConnect M6220, PowerConnect M6348, PowerConnect M8024, PowerConnect M8024-K
Artikkelegenskaper
Artikkelnummer: 000125969
Artikkeltype: Dell Security Advisory
Sist endret: 05 jun. 2025
Få svar på spørsmålene dine fra andre Dell-brukere
Støttetjenester
Sjekk om enheten din er dekket av støttetjenestene.