Dell Chassis Management Controller Firmware for Dell PowerEdge M1000E, VRTX, and FX2 or FX2S False Positive Security Vulnerabilities
Summary: This article provides a list of security vulnerabilities that cannot be exploited on Dell PowerEdge Chassis Management Controller (CMC) firmware for M1000E Chassis (version 6.21), VRTX Chassis (version 3.40) and FX2 or FX2S Chassis (version 2.40) but which may be identified by security scanners. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Security Article Type
Security KB
CVE Identifier
The CVE IDs are listed in the table below.
Issue Summary
See the 'Recommendations' section below for details on each CVE.
Recommendations
The vulnerabilities listed in the table below are in order by the date on which Dell Chassis Management Controller (CMC) Engineering determined that Dell Chassis Management Controller (CMC) firmware for Dell PowerEdge M1000E, VRTX, and FX2 or FX2S chassis determined that Dell Chassis Management Controller (CMC) were not vulnerable.
| Third-party Component | CVE ID | Summary of Vulnerability | Reason why Product is not Vulnerable | Date Determined False Positive |
| OpenSSH | CVE-2019-16905 | https://nvd.nist.gov/vuln/detail/CVE-2019-16905 | CVE-2019-16905 impacts servers or clients that use OpenSSH in combination with eXtended Merkle Signature Scheme keys (XMSS). Chassis Management Controller (CMC) does not support XMSS keys and is not affected by this vulnerability. | 01/19/2022 |
Legal Disclaimer
Affected Products
Chassis Management Controllers, Dell Chassis Management Controller Version 6.21 For Dell PowerEdge M1000e, Product Security InformationArticle Properties
Article Number: 000195385
Article Type: Security KB
Last Modified: 22 جمادى الآخرة 1443
Version: 1
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.