DSA-2019-124: Dell EMC PowerConnect Security Vulnerability

Zhrnutie: Dell EMC PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K firmware has been updated to address a vulnerability which may be potentially exploited to compromise the system.

Tento článok sa vzťahuje na Tento článok sa nevzťahuje na Tento článok nie je viazaný na žiadny konkrétny produkt. V tomto článku nie sú uvedené všetky verzie produktov.
Pozrite si ďalšie zdroje

Dosah

High

Podrobnosti

Dell PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.

CVSS Base Score:7.2 (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Dell PowerConnect 8024, 7000, M6348, M6220, M8024 and M8024-K running firmware versions prior to 5.1.15.2 contain a plain-text password storage vulnerability. TACACS\Radius credentials are stored in plain text in the system settings menu. An authenticated malicious user with access to the system settings menu may obtain the exposed password to use it in further attacks.

CVSS Base Score:7.2 (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)

Dell Technologies odporúča všetkým svojim zákazníkom, aby sa riadili nielen základným skóre CVSS, ale aj prechodným skóre a skóre závažnosti v konkrétnych prostrediach, na základe ktorého môžu vyhodnotiť celkové riziko vo vlastnom prostredí.

Dotknuté produkty a riešenie problému

Affected products:

The below Dell EMC PowerConnect models running firmware versions prior to 5.1.15.2: 

  • 8024
  • 7000
  • M6348
  • M6220
  • M8024
  • M8024-K

Remediation:

The following Dell EMC PowerConnect firmware release contains a resolution to the vulnerability:

  •     Dell EMC PowerConnect firmware version 5.1.15.2 and later.

Customers can download the latest firmware version at the support site for their respective model below:

  Dell EMC recommends all customers upgrade at the earliest opportunity. 
 

Affected products:

The below Dell EMC PowerConnect models running firmware versions prior to 5.1.15.2: 

  • 8024
  • 7000
  • M6348
  • M6220
  • M8024
  • M8024-K

Remediation:

The following Dell EMC PowerConnect firmware release contains a resolution to the vulnerability:

  •     Dell EMC PowerConnect firmware version 5.1.15.2 and later.

Customers can download the latest firmware version at the support site for their respective model below:

  Dell EMC recommends all customers upgrade at the earliest opportunity. 
 

Potvrdenia

Dell EMC would like to thank Daniel Cobb (@droctapus1) for reporting this vulnerability.

Súvisiace informácie

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Legal Disclaimer

Dotknuté produkty

PowerConnect M6220, PowerConnect M6348, PowerConnect M8024, PowerConnect M8024-K
Vlastnosti článku
Číslo článku: 000125969
Typ článku: Dell Security Advisory
Dátum poslednej úpravy: 05 jún 2025
Nájdite odpovede na svoje otázky od ostatných používateľov spoločnosti Dell
Služby podpory
Skontrolujte, či sa na vaše zariadenie vzťahujú služby podpory.