DSA-2024-358: Security Update for Dell Connectrix (Brocade) for Multiple Third-Party Component Vulnerabilities
Zusammenfassung: Dell Connectrix (Brocade) remediation is available for multiple third-party component Vulnerabilities that could be exploited by malicious users to compromise the affected system.
Dieser Artikel gilt für
Dieser Artikel gilt nicht für
Dieser Artikel ist nicht an ein bestimmtes Produkt gebunden.
In diesem Artikel werden nicht alle Produktversionen aufgeführt.
Auswirkungen
High
Weitere Angaben
CVE-2024-5461 is applicable only to Brocade 6547. This product is not sold by Dell and does not affect Brocade switches sold under Dell Connectix (Brocade).
Details
| Third-party Component | CVEs | More Information |
|---|---|---|
| SNMP | CVE-2024-5462 | Brocade Security ID: BSA-2024-2678 |
| libxml2 | CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Brocade Security Advisory ID: BSA-2024-2375 |
Betroffene Produkte und Korrektur
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2024-5462 | Connectrix B-Series | FOS | Versions prior to 9.2.0 | Version 9.2.0a or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.0 | Version 9.2.0b1 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.1.1d1 | Version 9.1.1d2 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
|---|---|---|---|---|---|
| CVE-2024-5462 | Connectrix B-Series | FOS | Versions prior to 9.2.0 | Version 9.2.0a or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.0 | Version 9.2.0b1 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
| CVE-2020-24977, CVE-2021-3517, CVE-2021-3518, CVE-2021-3537, CVE-2021-3541, CVE-2022-40304, CVE-2023-28484, CVE-2023-29469 | Connectrix B-Series | FOS | Versions prior to 9.1.1d1 | Version 9.1.1d2 or later | https://www.dell.com/support/home/product-support/product/connectrix-b-series-hardware/overview |
Note: The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Workarounds und Korrekturmaßnahmen
| CVE ID | Workaround and Mitigation |
|---|---|
| CVE-2024-5462 | The recommendation is to change SNMP authpassword / privpassword after enabling SNMPv3 password encryption as these secrets could have been previously exposed or may have been previously captured within an internal log that could be exposed on the next Supportsave capture. snmpconfig --set snmpv3 -index <index> {[-user <user_name>] [-groupname {ro | rw} ] [-auth_proto <auth_protocol> -auth_passwd <auth_password> [-priv_proto <priv_protocol> -priv_passwd <priv_password>]] [-engine_id <engine_id>]} |
Revisionsverlauf
| Revision | Date | Description |
|---|---|---|
| 1.0 | 2024-08-30 | Initial Release |
| 2.0 | 2024-09-12 | Updated for enhanced presentation with no changes to content |
| 3.0 | 2024-11-20 | Updated the affected versions |
| 4.0 | 2025-02-11 | Updated for enhanced presentation with no changes to content |
Zugehörige Informationen
Rechtlicher Hinweis
Betroffene Produkte
Connectrix DS-6610B, Connectrix DS-6620B, Connectrix DS-6620B-V2, Connectrix DS-6630B, Connectrix DS-6630B-V2, Connectrix DS-7720B, Connectrix DS-7730B, Connectrix ED-DCX6-4B, Connectrix ED-DCX6-8B, Connectrix ED-DCX7-4B, Connectrix ED-DCX7-8B
, Connectrix MP-7810B, Connectrix MP-7850B
...
Artikeleigenschaften
Artikelnummer: 000228212
Artikeltyp: Dell Security Advisory
Zuletzt geändert: 11 Feb. 2025
Antworten auf Ihre Fragen erhalten Sie von anderen Dell NutzerInnen
Support Services
Prüfen Sie, ob Ihr Gerät durch Support Services abgedeckt ist.