DSA-2022-158: Dell Unisphere for PowerMax, Dell Unisphere for PowerMax vApp, Dell Solutions Enabler vApp, Dell Unisphere 360, Dell VASA Provider vApp, and Dell PowerMax EMB Mgmt Security Update for Multiple Vulnerabilities
요약: Dell Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell Solutions Enabler Virtual Appliance, Dell Unisphere 360, Dell VASA Provider Virtual Appliance, and Dell PowerMax Embedded Management remediation is available for multiple security vulnerabilities that may be exploited by malicious users to compromise the affected system. ...
이 문서는 다음에 적용됩니다.
이 문서는 다음에 적용되지 않습니다.
이 문서는 특정 제품과 관련이 없습니다.
모든 제품 버전이 이 문서에 나와 있는 것은 아닙니다.
영향
High
세부 정보
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-31233 | Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. | 6.3 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N |
| Third-party Component | CVEs | More information |
| FreeBSD | CVE-2004-0230 | https://nvd.nist.gov/vuln/detail/CVE-2004-0230  |
| OpenSSL | CVE-2022-0778 | https://nvd.nist.gov/vuln/detail/CVE-2022-0778 |
| SLES 12 SP5 | See SUSE Update Advisories |
SUSE-SU-2021:1453-1, SUSE-SU-2021:1494-1, SUSE-SU-2021:1957-1, SUSE-SU-2021:4200-1, SUSE-SU-2022:0068-1, SUSE-SU-2022:0081-1, SUSE-SU-2022:0160-1, SUSE-SU-2022:0179-1, SUSE-SU-2022:0323-1, SUSE-SU-2022:0364-1, SUSE-SU-2022:0441-1, SUSE-SU-2022:0495-1, SUSE-SU-2022:0496-1, SUSE-SU-2022:0505-1, SUSE-SU-2022:0561-1, SUSE-SU-2022:0677-1, SUSE-SU-2022:0693-1, SUSE-SU-2022:0698-1, SUSE-SU-2022:0767-1, SUSE-SU-2022:0828-1, SUSE-SU-2022:0842-1, SUSE-SU-2022:0857-1, SUSE-SU-2022:0881-1, SUSE-SU-2022:0908-1, SUSE-SU-2022:0910-1, SUSE-SU-2022:1023-1, SUSE-SU-2022:1140-1, SUSE-SU-2022:1160-1, SUSE-SU-2022:1196-1 |
| Oracle | CVE-2022-0778, CVE-2022-21449, CVE-2022-21476, CVE-2022-21426, CVE-2022-21496, CVE-2022-21434, CVE-2022-21443 |
See NVD (http://nvd.nist.gov/ ) for individual scores for each CVE. |
| Proprietary Code CVE | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-31233 | Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. | 6.3 | CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N |
| Third-party Component | CVEs | More information |
| FreeBSD | CVE-2004-0230 | https://nvd.nist.gov/vuln/detail/CVE-2004-0230 |
| OpenSSL | CVE-2022-0778 | https://nvd.nist.gov/vuln/detail/CVE-2022-0778 |
| SLES 12 SP5 | See SUSE Update Advisories |
SUSE-SU-2021:1453-1, SUSE-SU-2021:1494-1, SUSE-SU-2021:1957-1, SUSE-SU-2021:4200-1, SUSE-SU-2022:0068-1, SUSE-SU-2022:0081-1, SUSE-SU-2022:0160-1, SUSE-SU-2022:0179-1, SUSE-SU-2022:0323-1, SUSE-SU-2022:0364-1, SUSE-SU-2022:0441-1, SUSE-SU-2022:0495-1, SUSE-SU-2022:0496-1, SUSE-SU-2022:0505-1, SUSE-SU-2022:0561-1, SUSE-SU-2022:0677-1, SUSE-SU-2022:0693-1, SUSE-SU-2022:0698-1, SUSE-SU-2022:0767-1, SUSE-SU-2022:0828-1, SUSE-SU-2022:0842-1, SUSE-SU-2022:0857-1, SUSE-SU-2022:0881-1, SUSE-SU-2022:0908-1, SUSE-SU-2022:0910-1, SUSE-SU-2022:1023-1, SUSE-SU-2022:1140-1, SUSE-SU-2022:1160-1, SUSE-SU-2022:1196-1 |
| Oracle | CVE-2022-0778, CVE-2022-21449, CVE-2022-21476, CVE-2022-21426, CVE-2022-21496, CVE-2022-21434, CVE-2022-21443 |
See NVD (http://nvd.nist.gov/ ) for individual scores for each CVE. |
영향을 받는 제품 및 문제 해결
| Product | Affected Versions | Updated Versions | Link to Update |
| Unisphere for PowerMax | Versions before 9.2.3.15 | 9.2.3.15 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers |
| Unisphere for PowerMax Virtual Appliance | Versions before 9.2.3.15 | 9.2.3.15 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers |
| Unisphere 360 | Versions before 9.2.3.6 | 9.2.3.6 | https://www.dell.com/support/home/product-support/product/unisphere-360/drivers |
| Solutions Enabler | Versions before 9.2.3.4 | 9.2.3.4 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers |
| Solutions Enabler Virtual Appliance | Versions before 9.2.3.4 | 9.2.3.4 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers |
| eVASA Provider Virtual Appliance | Versions before 9.2.3.7 | 9.2.3.7 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/vasa-provider/drivers |
| VASA Provider Standalone | Versions before 9.2.3.15 | 9.2.3.15 |
https://www.dell.com/support/home/product-support/product/vasa-provider/drivers |
| PowerMax OS | 5978 | 5978 | Request OPT 599422 for Hickory SR. |
| Product | Affected Versions | Updated Versions | Link to Update |
| Unisphere for PowerMax | Versions before 9.2.3.15 | 9.2.3.15 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers |
| Unisphere for PowerMax Virtual Appliance | Versions before 9.2.3.15 | 9.2.3.15 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/unisphere-powermax/drivers |
| Unisphere 360 | Versions before 9.2.3.6 | 9.2.3.6 | https://www.dell.com/support/home/product-support/product/unisphere-360/drivers |
| Solutions Enabler | Versions before 9.2.3.4 | 9.2.3.4 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers |
| Solutions Enabler Virtual Appliance | Versions before 9.2.3.4 | 9.2.3.4 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/solutions-enabler/drivers |
| eVASA Provider Virtual Appliance | Versions before 9.2.3.7 | 9.2.3.7 EEM: 9.2.3.19 |
https://www.dell.com/support/home/product-support/product/vasa-provider/drivers |
| VASA Provider Standalone | Versions before 9.2.3.15 | 9.2.3.15 |
https://www.dell.com/support/home/product-support/product/vasa-provider/drivers |
| PowerMax OS | 5978 | 5978 | Request OPT 599422 for Hickory SR. |
개정 내역
| Revision | Date | Description |
| 1.0 | 2022-06-27 | Initial Release |
감사의 말
CVE-2022-31233: Dell Technologies would like to thank Mateusz Dąbrowski for reporting this issue.
관련 정보
법적 고지 사항
해당 제품
PowerMax, PowerMax, PowerMax 2000, PowerMax 2500, PowerMax 8000, PowerMax 8500, PowerMaxOS 5978, Product Security Information, Solutions Enabler, Solutions Enabler Series, Unisphere for PowerMax, VASA Provider문서 속성
문서 번호: 000200975
문서 유형: Dell Security Advisory
마지막 수정 시간: 21 6월 2023
다른 Dell 사용자에게 질문에 대한 답변 찾기
지원 서비스
디바이스에 지원 서비스가 적용되는지 확인하십시오.