DSA-2021-091: Dell EMC XtremIO Security Update for Multiple Vulnerabilities
Zusammenfassung: Dell EMC XtremIO remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
Dieser Artikel gilt für
Dieser Artikel gilt nicht für
Dieser Artikel ist nicht an ein bestimmtes Produkt gebunden.
In diesem Artikel werden nicht alle Produktversionen aufgeführt.
Auswirkungen
High
Details
|
Proprietary Code CVE(s) |
Description |
CVSSBase Score |
CVSS Vector String |
|
CVE-2021-21549 |
Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations. |
8.8 |
|
Third-Party Component
|
CVE(s) |
More information |
|
OpenSSL |
CVE-2020-1971 |
See NVD (http://nvd.nist.gov/) for individual scores for each CVE |
|
Proprietary Code CVE(s) |
Description |
CVSSBase Score |
CVSS Vector String |
|
CVE-2021-21549 |
Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations. |
8.8 |
|
Third-Party Component
|
CVE(s) |
More information |
|
OpenSSL |
CVE-2020-1971 |
See NVD (http://nvd.nist.gov/) for individual scores for each CVE |
Betroffene Produkte und Korrektur
|
CVE(s) Addressed |
Product |
Affected Version(s) |
Updated Version(s) |
Link to Update |
|
CVE-2020-1971 |
XtremIO X1, XtremIO X2 |
XMS versions prior to 6.3.3-8 |
XMS 6.3.3-8 |
Dell EMC recommends all customers upgrade at the earliest opportunity. Customers can contact Dell EMC support to perform the upgrade. |
|
CVE-2021-21549 |
|
CVE(s) Addressed |
Product |
Affected Version(s) |
Updated Version(s) |
Link to Update |
|
CVE-2020-1971 |
XtremIO X1, XtremIO X2 |
XMS versions prior to 6.3.3-8 |
XMS 6.3.3-8 |
Dell EMC recommends all customers upgrade at the earliest opportunity. Customers can contact Dell EMC support to perform the upgrade. |
|
CVE-2021-21549 |
Workarounds und Korrekturmaßnahmen
None
Revisionsverlauf
|
Revision |
Date |
Description |
|
1.0 |
2021-05-13 |
Initial Release |
Danksagung
CVE-2021-21549: Dell would like to thank Tomasz Stachowicz for reporting this issue.
Zugehörige Informationen
Rechtlicher Hinweis
Betroffene Produkte
XtremIO, Product Security Information, XtremIO Family, XtremIO HW Gen2 400GB, XtremIO HW Gen2 400GB Encrypt Capbl, XtremIO HW Gen2 400GB Encrypt Disable, XtremIO HW Gen2 400GB Exp Encrypt Disable, XtremIO HW Gen2 400GB Expandable
, XtremIO HW Gen2 800GB Encrypt Capbl
...
Produkte
XtremIO HW Gen2 800GB Encrypt Disable, XtremIO HW Gen3 40TB, XtremIO HW Gen3 40TB Encrypt Disable, XtremIO HW X2-R, XtremIO HW X2-R Encrypt Disable, XtremIO HW X2-S, XtremIO HW X2-S Encrypt Disable, XtremIO HW X2-T, XtremIO HW X2-T Encrypt Disable
, XtremIO X1, XtremIO X2
...
Artikeleigenschaften
Artikelnummer: 000186363
Artikeltyp: Dell Security Advisory
Zuletzt geändert: 18 Sept. 2025
Antworten auf Ihre Fragen erhalten Sie von anderen Dell NutzerInnen
Support Services
Prüfen Sie, ob Ihr Gerät durch Support Services abgedeckt ist.